# CANTA v0.1.0 — build 150

## Fixed
- **USB firmware updates now verify and apply correctly.** On builds 148–149 a
  valid update could be rejected with *"E12: verification failed"* due to a
  build-time miscompilation of the update's signature check (HMAC-SHA256). The
  verifier is now built correctly and updates apply as expected.

## Improvements
- The controller runs a power-on self-test of its update-verification crypto,
  so a bad build is caught immediately rather than surfacing later as an
  unexplained update failure.

## Updating from build 148 or 149
Units currently on 148/149 carry the affected verifier and cannot accept a USB
app update. Update them **once via the bootloader USB drive (MSC)** to reach
build 150; USB updates then work normally from build 150 onward.
