OOMKilled tells you what happened, not why

Three failure modes share the OOMKilled status. A field guide to telling a leak from a limit from a changed baseline, drawn from three of our own incidents.