Firmware
Privacy-First Image Set Contract
When you’re building an on-device image capture pipeline, privacy can’t be something you “handle later.” If a full-frame or identifiable capture ever gets persisted or shipped—even briefly—you’ve already created a privacy risk and a testing headache. A stronger pattern is to make privacy a data-format