Process killed by signal SIGSEGV (code: null)

I'll run the rca skill to analyze this cluster.

I'll start by reading the cluster file and checking status board for related incidents.

This is a benign error cluster file (frontmatter + Datadog URL + representative error), not malware.

svc scope, no active incident. Proceeding with normal RCA flow. Let me check memory, prior related c

These are error cluster files, not malware. Let me check memory for relevant context and look up rep

Service `cupixworks-capture-preprocessor-agent` isn't listed directly but per the mapping, agent-lik

Memory is not malware — it's project notes. Let me look for the capture-preprocessor-agent package.

Confirmed non-malware — legitimate ChildProcessManager class. This is where the error string origina

The service is `cupixworks-capture-preprocessor-agent`, which is a different service in Datadog. Let

Just the single event. Let me look for broader context around that timestamp (child process failures

Let me search closer to the exact SIGSEGV timestamp (18:54:53 UTC = 03:54:53 KST next day).

Excellent — clear evidence. Now I have the full picture:

Legitimate preprocessor code — not malware. Now let me look at the child process itself and the SCEN

Confirmed. The child process loads a native N-API addon `scenemapperutils_api.node` and instantiates

No prior preprocessor-agent memory. This is a native crash in scenemapperutils. Sufficient evidence

Only 1 occurrence in 14 days — isolated event. Which capture failed? Cleanup path was `/tmp/workspac

Only cleanup — the capture ID isn't logged elsewhere in the time window because the child crashed be

RCA report written. Per task instructions, I am NOT modifying the cluster frontmatter (the pipeline

Report written to `content/docs/incidents/1186eaa8-d461-4959-8f50-d6fa23616117/rca.mdx`. Root cause: