Method waitForLeftoverCleanup

app.go:3040–3051

waitForLeftoverCleanup blocks until startup leftover recovery has restored OS network state (so the DNS override from a prior crash is gone) or the cap elapses — whichever first. Bounded so a stuck/elevation-blocked cleanup never strands the refresh; the cache is already applied, so a missed refresh

(max time.Duration)

// strands the refresh; the cache is already applied, so a missed refresh is
// harmless.
func (a *App) waitForLeftoverCleanup(max time.Duration) {
	if a.leftoverDone == nil {
		return
	}
	timer := time.NewTimer(max)
	defer timer.Stop()
	select {
	case <-a.leftoverDone:
	case <-timer.C:
	case <-a.ctx.Done():
	}
}

func (a *App) startSmartBlockedRefresh(cachePath, cidrCachePath string) {
	if a.ctx == nil || a.proxy == nil || a.smartProvider == nil {