Watchdog
Also: watchdog timer
An independent mechanism that triggers a bounded response when expected activity stops.
A watchdog must be refreshed only by demonstrated healthy progress and needs a defined reset, safe-output, evidence, and recovery path.
Example The motor controller commands zero after 150 ms without a fresh command.
Common misconception Refreshing a watchdog from an unconditional timer proves only that the timer still runs.