Cobra
88bc36af61
ARP proxy on WiFi APs causes the kernel neighbor table to show devices as REACHABLE even after they disconnect. This made last_seen refresh continuously from on_arrival() (netlink path), preventing the watchdog from ever detecting departure. Two fixes: 1. Remove _update_last_seen() from on_arrival() — netlink events are not reliable as a genuine-traffic source on ARP-proxy networks. last_seen is now only updated by the raw packet capture path (ARP requests, mDNS, DHCP) where src_mac must be the device itself. 2. Watchdog now covers all is_personal_device() entries in known_devices, not just the personal_devices enrollment set. device_labels entries (like named phones) were previously unmonitored by the watchdog.