This issue has been closed and folded into #212 (Rig DO Alarm — Work Scheduler).
The witness patrol is now part of the Rig DO alarm handler rather than a separate PR. The alarm periodically calls witnessPatrol() which checks container process health, detects dead agents, restarts with checkpoint recovery, and sends GUPP violation mail.
See #212 for the full implementation details.