Recovery-focused embedded firmware

Know what failed.
See how it recovered.

Cirvane gives constrained devices bounded services, recoverable configuration and explicit firmware rollback. Its first hardware target is the Seeed Studio XIAO ESP32-C5.

Bounded by designFixed services, queues and recovery work

Hardware testedXIAO ESP32-C5 evidence is committed

Honest about scopeDeveloper release, powered by ESP-IDF and FreeRTOS

Install v0.1.0

Flash the supported board

Download the full image for the Seeed Studio XIAO ESP32-C5 from the v0.1.0 release, verify it with SHA256SUMS, then write it at flash offset 0x0.

python -m esptool --chip esp32c5 \
  --port PORT \
  write-flash 0x0 cirvane-v0.1.0-xiao-esp32c5-full.bin

Replace the serial port with the one shown by your computer. After reset, open it at 115200 baud and run selftest.

What it does

Failure behaviour you can reason about

01

Supervises services

Fixed service identities, health checks and limited restart policies keep recovery work predictable.

02

Bounds messages

Typed messages use a fixed pool. Queues cannot grow without limit when a producer misbehaves.

03

Recovers configuration

Two verified records preserve the last valid settings after a corrupt or interrupted write.

04

Rolls firmware back

Signed dual-slot images must pass their first-boot health check or the device returns to the prior image.

Operator experience

Clear commands. Visible outcomes.

The privileged USB shell exposes identity, health, resource use, Wi-Fi and update state without hiding refusals behind generic errors.

cirvane> selftest
selftest: PASS
cirvane> wifi connect
Scanning for nearby networks...
Select a network [1-4]: 2
Password: ************
Connected. Address acquired.

Current status

Built for evaluation, not unattended deployment

Cirvane v0.1.0 is a developer release. Authenticated remote OTA, first-boot confirmation and automatic rollback have been tested on the supported board. USB-shell authentication, hardware Secure Boot, flash encryption, energy qualification, independent penetration testing and safety certification are not complete.