OK, I added the trigger source to the status message:
[{"id":"5bd0a5e5.e384ac","type":"homekit-service","z":"77d823ef.f4cfdc","isParent":true,"bridge":"f2691ed1.345838","parentService":"","name":"Shop Vac Automations","serviceName":"Switch","topic":"","filter":false,"manufacturer":"Default Manufacturer","model":"Default Model","serialNo":"Default Serial Number","cameraConfigVideoProcessor":"ffmpeg","cameraConfigSource":"","cameraConfigStillImageSource":"","cameraConfigMaxStreams":2,"cameraConfigMaxWidth":1280,"cameraConfigMaxHeight":720,"cameraConfigMaxFPS":10,"cameraConfigMaxBitrate":300,"cameraConfigVideoCodec":"libx264","cameraConfigAudioCodec":"libfdk_aac","cameraConfigAudio":false,"cameraConfigPacketSize":1316,"cameraConfigVerticalFlip":false,"cameraConfigHorizontalFlip":false,"cameraConfigMapVideo":"0:0","cameraConfigMapAudio":"0:1","cameraConfigVideoFilter":"scale=1280:720","cameraConfigAdditionalCommandLine":"-tune zerolatency","cameraConfigDebug":false,"cameraConfigSnapshotOutput":"disabled","cameraConfigInterfaceName":"","characteristicProperties":"{}","x":140,"y":480,"wires":[[],["9eb34377.f36268"]]},{"id":"a2ba3cb7.3e042","type":"change","z":"77d823ef.f4cfdc","name":"global.shop_vac_automations=true","rules":[{"t":"set","p":"shop_vac_automations","pt":"global","to":"true","tot":"bool"}],"action":"","property":"","from":"","to":"","reg":false,"x":700,"y":440,"wires":[["aa433e.2dbd24c"]]},{"id":"768d48bf.5bdb9","type":"switch","z":"77d823ef.f4cfdc","name":"On?","property":"payload.On","propertyType":"msg","rules":[{"t":"true"},{"t":"else"}],"checkall":"false","repair":false,"outputs":2,"x":490,"y":480,"wires":[["a2ba3cb7.3e042"],["6d0f7872.a2aa08"]]},{"id":"6d0f7872.a2aa08","type":"change","z":"77d823ef.f4cfdc","name":"global.shop_vac_automations=false","rules":[{"t":"set","p":"shop_vac_automations","pt":"global","to":"false","tot":"bool"}],"action":"","property":"","from":"","to":"","reg":false,"x":710,"y":480,"wires":[["87650525.957c"]]},{"id":"6d8d1b32.9f767c","type":"switch","z":"77d823ef.f4cfdc","name":"On?","property":"shop_vac_automations","propertyType":"global","rules":[{"t":"true"},{"t":"else"}],"checkall":"false","repair":false,"outputs":2,"x":490,"y":440,"wires":[["a2ba3cb7.3e042"],["6d0f7872.a2aa08"]]},{"id":"f3e63c28.6c7fb8","type":"inject","z":"77d823ef.f4cfdc","name":"On Startup","topic":"","payload":"","payloadType":"date","repeat":"","crontab":"","once":true,"onceDelay":0.1,"x":170,"y":440,"wires":[["6fe05e68.32eeb"]]},{"id":"9eb34377.f36268","type":"change","z":"77d823ef.f4cfdc","name":"src=homekitd","rules":[{"t":"set","p":"source","pt":"msg","to":"homekitd","tot":"str"}],"action":"","property":"","from":"","to":"","reg":false,"x":340,"y":480,"wires":[["768d48bf.5bdb9"]]},{"id":"6fe05e68.32eeb","type":"change","z":"77d823ef.f4cfdc","name":"src=injectnode","rules":[{"t":"set","p":"source","pt":"msg","to":"injectnode","tot":"str"}],"action":"","property":"","from":"","to":"","reg":false,"x":340,"y":440,"wires":[["6d8d1b32.9f767c"]]},{"id":"87650525.957c","type":"template","z":"77d823ef.f4cfdc","name":"Shop Vac Automations Off Msg","field":"payload","fieldType":"msg","format":"handlebars","syntax":"plain","template":"{ \"msg\": \"Shop Vac Automations Off (source={{source}}).\" }","output":"json","x":1010,"y":480,"wires":[["61d92885.a9bc3"]]},{"id":"aa433e.2dbd24c","type":"template","z":"77d823ef.f4cfdc","name":"Shop Vac Automations On Msg","field":"payload","fieldType":"msg","format":"handlebars","syntax":"plain","template":"{ \"msg\": \"Shop Vac Automations On (source={{source}}).\" }","output":"json","x":1010,"y":440,"wires":[["61d92885.a9bc3"]]},{"id":"61d92885.a9bc3","type":"link out","z":"77d823ef.f4cfdc","name":"","links":["f0587171.e4e688"],"x":1175,"y":460,"wires":[]},{"id":"f2691ed1.345838","type":"homekit-bridge","z":"","bridgeName":"NodeRED HomeKitD","pinCode":"111-11-111","port":"","allowInsecureRequest":false,"manufacturer":"Default Manufacturer","model":"Default Model","serialNo":"Default Serial Number","customMdnsConfig":false,"mdnsMulticast":true,"mdnsInterface":"","mdnsPort":"","mdnsIp":"","mdnsTtl":"","mdnsLoopback":true,"mdnsReuseAddr":true,"allowMessagePassthrough":false}]
Hopefully, the next time it happens, I'll have a better idea where to look.
If it is coming from the home app/homekit... I wonder if there's a way to know which device the command came from... I have multiple devices with the home app (3-4 computers and 4 iOS devices).
Strike that... I know node-red is restarting, so it can't be an issued homekit command!