fix(hardware): harden deployment process boundaries (#10054)