activate_firmware(shadow_partition) restart_controller()
image = download_firmware_package() if not verify_signature(image, vendor_pubkey): abort("Invalid signature")
enter_update_mode() write_shadow_firmware(image) if not verify_flash(shadow_partition): rollback() abort("Flash verification failed")
