@shaunmulligan I will try with with balena cli and systemctl stop balena.
I think that even just allowing to set a timeout before rebooting the device would be greater.
This could also help the Supervisor to not only send logs to the balenaCloud, but ask it what to do, e.g. restart the application, move to a different application (i.e. change the faulty container with another one), purge the /data or whatever else.
Is there any way to get a more verbose logging?