How we detect a bad Capacitor OTA and roll it back in 10 seconds

I ship JavaScript over the air for a living. The failure mode that still keeps me honest is not a bad...