At least for the RD2, you can use the internal watchdog, that puppy does not start by itself on reset.
I am adamant (sorry Peter) that an external watchdog is almost worthless since the likelyhood that a runaway program will toggle a port pin is rather large whereas the double write required for an internal puppy is extremely unlikely to happen.

Erik