6 Commits

Author	SHA1	Message	Date
Peter Woolery	5ec678dfa3	fix: tighten version parsing, propagate HMAC sign failure, add deployment docs ... Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>	2026-05-11 11:26:44 -07:00
Peter Woolery	5cf122b922	feat(firmware): wire OTA updater into main loop with 6-hour polling task ... Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>	2026-05-11 11:22:29 -07:00
Peter Woolery	a21dcfa349	feat(firmware): implement OTA download, ECDSA verify, and flash ... Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>	2026-05-11 11:18:44 -07:00
Peter Woolery	66e6808e13	feat(firmware): implement ECDSA P-256 signature verification in OTA library ... Replaces placeholder ota_verify_signature_with_key with real mbedtls ECDSA verify; adds 4-case native test suite with generated P-256 vectors. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>	2026-05-11 11:15:52 -07:00
Peter Woolery	8b1fd10db7	feat(firmware): add OTA updater library skeleton with version comparison ... Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>	2026-05-11 06:59:02 -07:00
Peter Woolery	437f73739f	feat(tools): add ECDSA P-256 key generation tool and public key header ... Generates firmware signing keypair; private key stays in gitignored secrets/, public key written as 65-byte C array to firmware/lib/ota_updater/ota_pubkey.h for compile-time OTA verification. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>	2026-05-11 06:47:10 -07:00