Public Access
- Config-load and camera-init FATAL branches now reboot (3s LED signal before restart) instead of hanging forever. Matches the enum name REBOOT_FATAL_* and makes camera-init failures diagnosable via the next boot's heartbeat recent_events. Config failures produce a visible reboot loop rather than a silent hang. - Emit EVT_NTP_SYNC(seconds_since_boot) on the first NTP-synced reporter iteration so slow / failed NTP sync is a visible signal in the heartbeat's recent_events window. - README "Deploying firmware 1.1" now opens with a "Before you flash" warning directing the operator to land server-side heartbeat schema changes first (migration 005 + stub integration) to avoid a strict-schema 4xx reboot loop after deployment.