What contract should bootloaders keep with application firmware?

Bootloaders need a written contract with application firmware for flash layout, metadata slots, image states, and minimum compatible app versions. Refuse incompatible images with supportable blink codes or GATT errors. For example, a gateway bootloader should reject firmware using a new partition map until the OTA parser is updated.