How should DFU over BLE recover from timeout mid-transfer?

DFU over BLE should resume from the last acknowledged block, use idempotent flash writes, and verify CRC before swapping images. The app should show progress and clear recovery instructions. For example, after a mid-transfer timeout, a wearable can reconnect and continue at block 842 instead of restarting until the battery dies.