Rollback despite system being marked as good

hello,

the rollback occurs because of pa_start_IsHardwareFaultReset not detecting a powerfailure, and thus the start of legato continuously increminting /legato/bootCount even for a good system.

To PREVENT golden rollback, without rebuilding a .cwe, you might just modify, from your application:
/etc/init.d/startlegato.sh

start)
  echo "Legato start sequence"
  umount /legato 2>/dev/null
  mount -o bind $LEGATO_MNT /legato

  /bin/mv -f /legato/bootCount /legato/bootCount.IGNORED 2>/dev/null   #ANTIROLLBACK

Doing so, will still garantee that if a next update fails, the previous ‘good’ system will be rolledback, due to the GetNumTries and the probing period of the freshly installed “TRYABLE” system, at the sole condition that this modification is done FROM the application itself, not from an update overlay.
This quick solution is possible thanks to the mount overlay nature of /etc/init.d.

regards