I agree with your logic.

I had never seen the ```service_check_running``` implementation, and am rather surprised that it only returns ```$(prefix)_{kept,repaired}```. It doesn't seem right to me that "check running not ok" equates to "repaired", since no actions were taken. I suggest that we change this behaviour (probably to use ```{kept,error}``` instead, and hopefully to have all appropriate classes included prefixed ones, etc).

Therefore, I suggest that you change the current PR using only the ```service_check_running_${canonified_service_name}_ok``` class (and of course ```!service_check_running_${canonified_service_name}_ok``` when necessary).