Update issues

Symptom	Check
OTA rejected	SHA-256 mismatch
Service dead after OTA	Installer should roll back; journalctl -u kaonic-installer; restore known ZIP
Wrong radio after yocto bump	Image SRCREV ≠ the radio git you thought

Full-image failures: recovery.