So, this all tells me, that Alex has an improper design which he wants to cure by the help of a watchdog.
oh, how many times have that been the case, this is not the first post seen "my 'design' does not work, how do I use a watchdog".

The rule should be that if the watchdog bites more often than once a year in one of 1000 boards (average one bite per 365000 days of operation), the design is faulty.

If, in my design, the watchdog bites (mishap - not to invoke a restart) a message comes out "please report fault code xxxx".

Erik

Ps I am trying to be 'nice', or I would use a lower permissible hit rate.