I’d like to get more clarity on how automatic rollbacks of OTA updates work. The documentation says this:
If for some reason an OTA is interrupted (like a disruption in connectivity or a device losing power), the device will fail gracefully by automatically reverting to the previous version of working firmware
And this is the only reference to “rollbacks” that I found in the docs.
What about the case when OTA is technically completed (no disruption in connectivity) but device is in unusable state, like not responding to commands? Ideally each device should have a customizable health check which it should pass within N seconds after OTA. Is this supported by firmware?