How should development and production provisioning differ on PSOC Edge?

Define the boot trust model, update authority and required debug policy before programming security-related settings. Read the exact device and tool documentation for each lifecycle transition. A convenient prototype configuration and a production security configuration serve different operational needs.

Keep development keys separate from production signing material and document who controls the latter. Test the complete signed-update and recovery workflow on appropriate development units. Do not use a production device as the first experiment for an irreversible lifecycle change.

Retain a per-release record of compatible boot components, application images and provisioning configuration without exposing private keys. Verify how service personnel diagnose a failed unit after debug restrictions are applied. Security settings need a maintainable support process as well as a successful initial boot.