security: HTTPS bootstrap, CA pinning, truthful control outcomes, and a control hook (3.1.0) - #163

Merged

cayossarian merged 11 commits into

mainfrom

feat/security-hardening-3.1.0

Aug 26, 2026

Commits on Aug 25, 2026

fix(auth): stop putting the rejected passphrase in the exception message
cayossarian
committed
668e09f
feat(http): HTTPS transport for the bootstrap REST calls
cayossarian
committed
e41d94a
feat(mqtt): pin the panel CA instead of refetching it on every connect
cayossarian
committed
5ee8eae
fix(mqtt): a control command now says what happened to it
cayossarian
committed
bf11afc
feat(control): write-then-verify, via a ControlTarget the adapter names
cayossarian
committed
3810b4d
feat(control): ControlInterceptor -- one veto/observe point for all five setters
cayossarian
committed
3cc214f
chore: 3.1.0, with the adapters at 1.1.0
cayossarian
committed
ab4bb5d
fix(control): a discarded write stops waiting, and a mismatch names its remedy
cayossarian
committed
a563dee
test(schema-0): pin the property-callback shim to the protocol's tuple
cayossarian
committed
a643b68
fix(control): a discarded write says it was discarded, not that it was rebuilt
cayossarian
committed
809b189
docs: name the second protocol breakage, and bound the refusal claim
cayossarian
committed
71142fb