Security and privacy · promise
Read-only by default.
PlannedBy design; Phase 3
The promise
Connectors read. Writing to a building is a separate capability that is off until a named person turns it on, and every write is logged.
What is implemented
- Nothing yet: there is no release.
What is planned
- The connector interface declares
write: false; no 0.x connector implements writing. - The BACnet/IP connector ships without the WriteProperty service compiled in.
- When write capability arrives: per-connector enable by an admin, a role that grants it, a reason on every write, an audit record.
How to check it yourself
- Read the connector interface in the repository. Writing is a separate type, not a setting.
Found a gap between this page and the software? Tell us. A promise we cannot keep gets rewritten, not defended.