Safe Rust can still retain memory forever
The borrow checker prevents use-after-free, not logical retention. An Arc clone in a registry is another owner, so request state remains live until that registry releases it. RSS alone is weak evidence because allocators may retain pages; a retained-object path or strong-count invariant is more direct.