How do you version APIs when firmware and apps ship on different cadences?

Treat the GATT service contract and REST payloads as versioned interfaces with explicit capability flags. Apps should probe firmware semver and gate features; firmware should ignore unknown commands safely. Maintain a compatibility matrix in CI and block releases that drop support for field firmware still under warranty. Example: a new app screens a diagnostic panel only when the device advertises capability diagnostics.v2.