Commit 97f2a49
committed
feat: ADR-032 multistatic mesh security hardening
Addresses all 7 open security findings from security audit:
- H-1: HMAC-SHA256 beacon authentication + monotonic nonce
- M-3: SipHash-2-4 frame integrity tag
- M-4: Token-bucket NDP rate limiter (20/sec default)
- M-5: Coherence gate max_recalibrate_duration (30s)
- L-1: Ring buffer transition log (max 1000)
- L-4: explicit_bzero() NVS password buffer
- L-5: _Atomic qualifiers for dual-core safety
Co-Authored-By: claude-flow <[email protected]>1 parent c520204 commit 97f2a49
1 file changed
Lines changed: 425 additions & 0 deletions
0 commit comments