Peter Woolery 2226c1b4ca fix(tools): validate flash_device.py HMAC secret format before flashing ...

--hmac-secret accepted any string and passed it through to NVS, silently
producing a device that cannot authenticate to the server. Reject anything
that isn't exactly 64 hex characters (32 bytes) before generating the NVS
image. Auto-generated secrets are validated too as a defensive check.

Found via adversarial review (both reviewers, run 2026-05-01-192928).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-01 13:19:16 -07:00

..

capture_frames.py

feat: event-based walker detector tuned to real 7' overhead mount

2026-04-17 16:03:36 -07:00

flash_device.py

fix(tools): validate flash_device.py HMAC secret format before flashing

2026-05-01 13:19:16 -07:00

ota_push.py

feat: ota_push.py operator firmware update script

2026-04-14 10:28:28 -07:00

replay_frames.py

feat: event-based walker detector tuned to real 7' overhead mount

2026-04-17 16:03:36 -07:00

replay_logs.py

feat: event-based walker detector tuned to real 7' overhead mount

2026-04-17 16:03:36 -07:00

serial_monitor.py

docs: add Troubleshooting section + serial_monitor.py diagnostic tool

2026-04-17 07:05:21 -07:00