Default radio profile crossover to off

src/RadioProfiles.h

@@ -71,7 +71,7 @@ class RadioProfiles {
   RadioProfileConfig secondary;
   bool primary_temporary = false;
   bool secondary_temporary = false;
-  RadioCrossMode cross = RadioCrossMode::Auto;
+  RadioCrossMode cross = RadioCrossMode::Off;
   // Infrastructure opts into BOTH at startup; Companions keep their own
   // contact/channel policy. Force applies only to locally generated replies.
   uint8_t reply_tx = RADIO_TX_AUTO;

src/helpers/RadioProfileCLI.cpp

@@ -213,6 +213,7 @@ bool RadioProfileCLI::commitSavedImage(const char* path) {
 void RadioProfileCLI::begin(FILESYSTEM* fs, Radio* radio, RTCClock* rtc, bool infrastructure_replies) {
   fs_ = fs; radio_ = radio; rtc_ = rtc; last_ms_ = millis();
   hold_ = false;
+  cross_ = RadioCrossMode::Off;
   recoverable_corrupt_store_ = false;
   manual_secondary_ = false;
   secondary_intent_generation_ = 0;
@@ -222,6 +223,7 @@ void RadioProfileCLI::begin(FILESYSTEM* fs, Radio* radio, RTCClock* rtc, bool in
 #endif
   infrastructure_replies_ = infrastructure_replies;
   if (radio_ && radio_->profiles()) {
+    radio_->profiles()->cross = cross_;
     radio_->profiles()->reply_tx = infrastructure_replies ? RADIO_TX_BOTH : RADIO_TX_AUTO;
     radio_->profiles()->reply_force = false;
   }
@@ -270,7 +272,7 @@ void RadioProfileCLI::begin(FILESYSTEM* fs, Radio* radio, RTCClock* rtc, bool in
     // structurally valid backup exists; that backup is the last known-good
     // radio-profile image and must remain available for manual recovery.
     const ImageReadResult backup_image = readImage(BackupPath, bytes, sizeof(bytes));
-    hold_ = true; saved_ = {}; primary_preamble_ = 0; cross_ = RadioCrossMode::Auto;
+    hold_ = true; saved_ = {}; primary_preamble_ = 0; cross_ = RadioCrossMode::Off;
     recoverable_corrupt_store_ = backup_image != ImageReadResult::Valid
         && backup_image != ImageReadResult::Unreadable;
     reply_setting_ = 0;  // reject the entire image, including its reply override

src/helpers/RadioProfileCLI.h

@@ -26,7 +26,7 @@ class RadioProfileCLI {
   RadioProfileConfig temporary_;
   RadioProfileConfig pending_temporary_;
   uint16_t primary_preamble_ = 0;
-  RadioCrossMode cross_ = RadioCrossMode::Auto;
+  RadioCrossMode cross_ = RadioCrossMode::Off;
   uint8_t reply_setting_ = 0;  // reserved image byte: 0 = role default
   bool infrastructure_replies_ = false;
   // Saved Off can be an explicit veto, rather than an unused secondary slot.

src/helpers/ui/RadioProfileSystemStatus.h

@@ -24,7 +24,7 @@ struct RadioProfileSystemStatus {
   bool dual_radio_enabled = false;
   bool secondary_temporary = false;
   RadioProfileMode secondary_mode = RadioProfileMode::Rx;
-  RadioCrossMode cross = RadioCrossMode::Auto;
+  RadioCrossMode cross = RadioCrossMode::Off;
   float noise_floor_1 = 0.0f;
   float noise_floor_2 = 0.0f;
   float noise_floor_1_seconds = 0.0f;