Platform
Security
Device authentication, mediated access and an auditable trail.
Overview
Every appliance authenticates to the host before it can join the bus. Every application request reaches a device only through the host. Every command is attributable.
Why the architecture is the security model
Because applications cannot address appliances directly, there is no path that bypasses policy. The security posture follows from Principle 5 rather than from a component added on top of it.
Future expansion
- Hardware-backed device identity
- Signed protocols and signed OTA payloads
- Per-deployment data residency
Next
Identity