security(programs): enforce system-admin authorization on Force Unlock#336

Draft

gonzalesedwin1123 wants to merge 9 commits into

19.0from

security-programs-force-unlock-authz

Commits on Jul 23, 2026

test(security): pin that Force Unlock requires system admin server-side
gonzalesedwin1123
committed
security(programs): enforce system-admin authorization on Force Unlock
gonzalesedwin1123
committed
docs(spp_programs): regenerate README from fragments (CI oca-gen output)
gonzalesedwin1123
committed
security(programs): make the operation lock a real server-side boundary
gonzalesedwin1123
committed
security(programs): document sudo in lock helpers (nosemgrep)
gonzalesedwin1123
committed
docs(spp_programs): regenerate README from fragments (CI oca-gen output)
gonzalesedwin1123
committed
security(programs): route ALL lock writers through the sudo helpers
gonzalesedwin1123
committed
docs: regenerate README from fragments for geofence + farmer_demo (CI oca-gen output)
gonzalesedwin1123
committed
docs(programs): add in-code #337 breadcrumb near the lock helpers
gonzalesedwin1123
committed