Understood. But if I load up the page (apps) for the first time after the rule should be active, shouldn’t it not say “Restricted”?
Is there any way to tell, short of triggering motion when the rule leaves and enters restricted? I have had logging enabled for months on the rule. It did not trigger at all yesterday, so there are no logs.
When the page is refreshed, it shows the current state of the restriction. This is true for the Apps list page, and for the rule setup page. The underlying restriction is refreshed whenever its underlying state changes, however, when the rule is triggered the state of the restriction is examined then and used to decide whether or not to actually run the rule's actions. There's two things going on: primary is the test of the restriction when the rule is triggered, and secondary is keeping the red Restricted text present or not as applicable.
Look at the Event Subscriptions and Scheduled Jobs for the rule on its App Status page (gear icon). Yours should look like this:
The handler called refresh will update the red text display, which is actually part of the app's name. This scheduled job above is 30 minutes before tomorrow's sunset. The event subscription above for sunrise is going to run a method called 'afterSunriseHandlerend'. That method is going to schedule another refresh at 30 minutes after sunrise tomorrow morning. The sunsetTime event will happen at tomorrow's sunset, and will schedule the refresh for the next evening at 30 minutes prior to sunset.
However, in the meantime, if the rule is triggered, it will check that the current time is between those two times, and if it is run the rule, and if not exit without running the rule.