Skip to content

Security and privacy · promise

Read-only by default.

PlannedBy design; Phase 3

The promise

Connectors read. Writing to a building is a separate capability that is off until a named person turns it on, and every write is logged.

What is implemented

  • Nothing yet: there is no release.

What is planned

  • The connector interface declares write: false; no 0.x connector implements writing.
  • The BACnet/IP connector ships without the WriteProperty service compiled in.
  • When write capability arrives: per-connector enable by an admin, a role that grants it, a reason on every write, an audit record.

How to check it yourself

  • Read the connector interface in the repository. Writing is a separate type, not a setting.

Found a gap between this page and the software? Tell us. A promise we cannot keep gets rewritten, not defended.

All promises