Set of cron jobs that check services, then send a Matrix message if there's an issue.
For the cron jobs, I pipe stderr to another script that watches those and does the same.
If all fails, and internet is unavailable and the router crashes, a Pi will toggle a relay, cutting and resupplying power.
Graphene could sandbox the integrity check, just like they do with the Play Store.