5 Commits

Include renames

Author	SHA1	Message	Date
Commander1024	4a53a21f31	Move console payloads to lazy PSRAM storage	2026-09-13 23:06:42 +02:00
Commander1024	ac80863d80	Remove Legacy Credential Bootstrap Paths ... Decouple user provisioning from HTTPS identity storage while retaining compatible v1 user records and migrating TLS material to the credential-free v2 format. Add focused security regression coverage and update operator documentation.	2026-09-08 19:09:26 +02:00
Commander1024	42f6423d4e	Implement SSH authorized key management	2026-09-08 16:37:47 +02:00
Commander1024	94433ef975	Add typed account and password settings ... - Add admin account list, create, role, delete, and password workflows - Execute identity-checked mutations through the existing dispatcher - Bound queued credential lifetime and wipe transient secrets - Add explicit password generation with saved-value acknowledgement - Handle self-revocation and uncertain outcomes without automatic retries - Register optional account routes without disrupting terminal transports - Expand host regressions and document contracts and pending target checks Validated host suites and pio run; hardware validation remains pending.	2026-09-08 09:27:02 +02:00
Commander1024	fe1e2d98b4	Enable bounded browser account administration for Phase 8D.7 ... Allow other-account add/password and forced delete/role commands through shared dispatcher and handler policy. Keep self-target, generated-secret, key, bootstrap, and recovery workflows blocked. Revalidate currentness after password prompts and before database API admission. Document that admitted mutations may finish after disconnect, while subsequent stale operations must reject. Add policy, transaction-failure, cleanup, and targeted-revocation regressions. Record completed review, passing host tests and firmware build, with target validation and M2 acceptance still pending.	2026-09-07 10:03:45 +02:00