R1: Supervisor + TWDT. R2: OTA with 120s validation rollback. R3: NVS boot counter, safe mode after 5 crashes. R4: Coredump to flash.