ruv 47223a98be fix: security hardening — replace fake HMAC, add path traversal protection, OTA auth (ADR-050) ... Sprint 1 security fixes from quality engineering analysis (issue #170): - Replace XOR-fold fake HMAC with real HMAC-SHA256 (hmac + sha2 crates) in secure_tdm.rs - Add path traversal sanitization on DELETE /api/v1/models/:id and /api/v1/recording/:id - Default bind address changed from 0.0.0.0 to 127.0.0.1 (configurable via --bind-addr / SENSING_BIND_ADDR) - Add PSK authentication to ESP32 OTA firmware upload endpoint (ota_update.c) - Flip WASM signature verification to default-on (CONFIG_WASM_SKIP_SIGNATURE opt-out vs opt-in) - Add 6 new security tests: HMAC key/message sensitivity, determinism, wrong-key rejection, bit-flip detection, enforcing mode - Add clap env feature for environment variable configuration All 106 hardware crate tests pass. Sensing server compiles clean. Closes #170 Co-Authored-By: claude-flow <ruv@ruv.net>		2026-03-06 13:11:04 -05:00
..
adaptive_classifier.rs	feat: adaptive CSI classifier with signal smoothing pipeline (ADR-048) (#144)	2026-03-05 10:15:18 -05:00
dataset.rs	feat: ADR-023 full DensePose training pipeline (Phases 1-8)	2026-02-28 23:22:15 -05:00
embedding.rs	feat: ADR-024 Contrastive CSI Embedding Model — all 7 phases (#52)	2026-03-01 01:44:38 -05:00
graph_transformer.rs	feat: ADR-024 Contrastive CSI Embedding Model — all 7 phases (#52)	2026-03-01 01:44:38 -05:00
lib.rs	feat: ADR-024 Contrastive CSI Embedding Model — all 7 phases (#52)	2026-03-01 01:44:38 -05:00
main.rs	fix: security hardening — replace fake HMAC, add path traversal protection, OTA auth (ADR-050)	2026-03-06 13:11:04 -05:00
model_manager.rs	fix: WebSocket race condition, data source indicators, auto-start pose detection (#96)	2026-03-02 13:47:49 -05:00
recording.rs	fix: WebSocket race condition, data source indicators, auto-start pose detection (#96)	2026-03-02 13:47:49 -05:00
rvf_container.rs	feat: ADR-024 Contrastive CSI Embedding Model — all 7 phases (#52)	2026-03-01 01:44:38 -05:00
rvf_pipeline.rs	feat: ADR-023 full DensePose training pipeline (Phases 1-8)	2026-02-28 23:22:15 -05:00
sona.rs	feat: ADR-023 full DensePose training pipeline (Phases 1-8)	2026-02-28 23:22:15 -05:00
sparse_inference.rs	feat: Training mode, ADR docs, vitals and wifiscan crates	2026-02-28 23:50:20 -05:00
trainer.rs	feat: ADR-024 Contrastive CSI Embedding Model — all 7 phases (#52)	2026-03-01 01:44:38 -05:00
training_api.rs	fix: WebSocket race condition, data source indicators, auto-start pose detection (#96)	2026-03-02 13:47:49 -05:00
vital_signs.rs	feat: ADR-021 vital sign detection + RVF container format (closes #45)	2026-02-28 22:52:19 -05:00