Signed, rollback-safe OTA updates for ESP32. The board, build number and image hash are signed together, so devices refuse old, foreign or tampered builds, and roll back if a new build fails its self-test.