Cut firmware power draw 55%
A whole class of vulnerabilities kept resurfacing, patched one instance at a time by whoever happened to find it. I closed it structurally instead — changed the pattern that made it possible, then added the tests and the review gate that keep it closed when nobody is watching.
Reworked the sleep/wake cycle and IO; measured power draw dropped 45%.