Apply flow (pseudo): ```c // REQ-OTA-APPLY-02; TEST-OTA-06 if (!verify_manifest(m) || !verify_sig(pkg, m->sig)) abort(); if (m->version <= current_version()) abort(); // anti-rollback if (!write_slot(m->slot, pkg, m->len)) abort(); mark_pending(m->version, m->slot); reboot(); ```