Warning if device check fails (rule no longer applies)

If a check on a device stops running because the underlying rule no longer applies, a warning should appear (rather than the check simply disappearing). Optional: "Persist" or "lock in" checks at the device level, regardless of rule changes.