nx_iot_watchdog_test.nx

nx_iot_watchdog_test.nx -- gate for the per-device link healer. Proves the operator's blink loop is closed automatically + MEASURED: - sealed-enum validity (health / observation / action) - NEVER-BRICK: the whole action alphabet is brick-safe + writes no firmware; the classifier is FAIL-SAFE (out-of-range -> RED) - init: default threshold / override / null guard - per-transition coverage of every (health x observation) edge - THE FULL BLINK LOOP end-to-end: HEALTHY -> (misses) UNREACHABLE -> PAIRING -> REPROVISION -> READOPTED -> HEALTHY, with recover_count incrementing once per auto-heal (the manual re-pairs spared) and brick-safety asserted at every emitted action - a SECOND cycle increments the measured count again - self-recovery (UNREACHABLE -> SEEN) revives WITHOUT counting as a re-provision (honest: it came back on its own) - defensive: malformed observation is a no-op; null does not crash expect_exit: 0 license_tier: ORIGINAL