Function refresh_live 

pub fn refresh_live(
    host: &dyn ProbeHost,
    base: &NodeFacts,
    now: u64,
) -> NodeFacts

Cheap live refresh of base: only free memory is re-read (no container engine, no subprocess beyond vm_stat / /proc/meminfo). Capability states are carried over from base; the caller owns busy tracking.