Low-Cost Error Containment and Recovery for Onboard Guarded Software Upgrading and Beyond