Cortex-M7 CPU DMA engine separate bus master Corrupt 256-bit flash word torn write → inconsistent ECC ✗ Precise bus fault → HardFault, every boot ✓ FLASH_SR: DBECCERR set transfer completes — no fault load read So the bootloader now scrubs flash before it ever hands control to the app. A mem-to-mem DMA read walks the…