Version audit

Every device in the fleet is checked against the latest stable release, and models that no longer receive vendor patches are flagged before they become a security problem.

Staged rollout

Updates are applied in small batches with a full backup taken first, so a failed image or an interrupted download never leaves a device unable to boot.

After the update

Battery behaviour, storage health and the critical apps are tested once the new firmware settles, and anything that regressed is rolled back or re-configured before sign-off.