Firmware Error Handling and Recovery Architecture: Designing Embedded Systems That Know How to Fail
Designing the firmware fault path: error vs fault, recovery worst-case timing, I2C bus recovery, supervised watchdogs and evidence that survives a reset.