Device trust, config sync, failover logic, traffic groups, upgrades, split-brain cases, and recovery steps