Signed firmware manifests, streaming image verification, and A/B slots that fall back on their own.