ota_rollback.h File Reference

OTA rollback protection / soft-brick safeguard (PC_ENABLE_OTA_ROLLBACK). More...

#include "protocore_config.h"
#include <stdint.h>

Go to the source code of this file.

Detailed Description

OTA rollback protection / soft-brick safeguard (PC_ENABLE_OTA_ROLLBACK).

After an OTA update the new image boots in the PENDING_VERIFY state. This service decides, each tick, whether to commit it (a self-test passed), roll back to the previous image (self-test failed, or the confirm window elapsed without success), or keep waiting - so a bad update self-heals instead of soft-bricking. The decision is a pure function (host-tested); the commit / rollback wrap esp_ota_ops on ESP32. Needs the bootloader's app-rollback support.

Author

Douglas Quigg (dstroy0)

Date

2026

Definition in file ota_rollback.h.