Firmware updates are a hassle and a legal risk, so many devices never get one. A new OASIS standard wants that lifecycle status made visible.