Four prohibitions, and the validation checks them: only one collection at a time (two would file the declarations twice), never as root, no declaration deleted, and the simulated dock hardware left as it is. The sandbox lives for four hours.
Tip
After any change to a unit, systemctl daemon-reload: without it, systemd carries on with the copy it holds in memory, and systemctl show will tell you so. And a udev rule only acts on the device's next event: udevadm trigger, or plugging it back in.
systemd
timer
udev
git
reliability
Linux: systemd services, timers and udev rules · MonPremierLab