- Collector: timestamped ring (deque, 60s prune under lock); RateIn/Out KB/s - Query text/JSON gain kb_s_in/kb_s_out columns - test: assert rates non-zero after traffic, disabled fast-path takes no lock - full realtime suite green (13 binaries, 0 fail)