[U-Boot-Users] Field upgrade

Hi,

One of my requirements is that the firmware be field upgradeable. The problem at the moment is that if something goes wrong while erasing and programming a new u-boot there is no recovery without a jtag/bdm debugger. Does anyone have a solution, or is it not a problem in practice? I was playing with the idea of having a backup u-boot and some method of falling back to it if the primary copy is corrupt.

Chris.