mirror of
https://github.com/openglow-org/forgefirm.git
synced 2026-09-28 01:01:12 -07:00
The hardware watchdog is armed by the bootloader and kept fed by the kernel core; nothing in userspace opens it. Until now nothing in the catalog read that it is running. image.health reads watchdog0's state, timeout and bootstatus (CONFIG_WATCHDOG_SYSFS, meta-openglow) and requires active at 60 s; bootstatus goes into the evidence, so a campaign that follows a watchdog reset says so. Bench: on 2026-09-02 the forced hang ended in the factory recovery after the 60 s timeout; the register read WCR 0x771f. The sysfs view itself arrives with the next image, so this check is proven there. Catalog consequence: image.health is always-run.