Systems do not drift, they jump between named states along drawn edges. Read live TCP socket states with ss (including the famous forgotten-close leak), watch process states flip under signals, and learn the first question of every incident: what state is it in, and what transition is it waiting for?