This controls whether the Tmu system resets itself automatically when a fatal error is detected; the normal production setting is 'reset-fatal' so the device self-recovers, while the alternative is used for debugging so a faulted unit stays up for inspection. Admins would only change this away from the default during an active vendor-assisted debug session. For example, setting this to disable auto-reset lets support staff capture the device's state after a fatal error instead of it silently rebooting.