activity/{seq}-{unitType}-{unitId}.jsonl — full tool-call and message stream per unit
journal/YYYY-MM-DD.jsonl — iteration-level events. Orchestrator path emits orchestrator-* events (orchestrator-dispatch-match, orchestrator-guard-block, orchestrator-terminal, etc.); legacy loop events (dispatch-match, stuck-detected, guard-block, unit-start/end, terminal) can still appear on non-orchestrator paths.
metrics.json — token/cost ledger; duplicate type/id entries indicate a stuck loop
auto.lock — JSON snapshot of the currently-owning PID; stale lock = crash mid-unit
forensics/ — saved prior reports
debug/ — debug logs if enabled
runtime/paused-session.json — serialized session when auto-mode paused
doctor-history.jsonl — doctor check history

The /gsd forensics command pre-computes a forensic report with anomalies flagged. This skill is the manual investigation that goes deeper, or runs when the automated report isn't enough.