The state file is keyed both ways — a bare container name for the container check, container plus suffix for the HTTP, API, CPU and docker checks — so inspecting the key asked docker about Emby_http and deleted a live counter every cycle, putting the two-strike limits out of reach.