Public Access
Reorder reporter_heartbeat so NVS persistence commits before in-RAM apply. If save fails, log and return without touching runtime state; RAM and NVS stay consistent on the prior version instead of diverging until reboot. Rewrite README "Trust model" to state reality: reporting is plain HTTP and HMAC signs only requests, not responses. A LAN-local MITM can push any config that passes the device range validator. Add roadmap entry for authenticated config push (HTTPS or signed envelope).