Owner devices can reach home servers
AlwaysOwner devices -> SSH and HTTPS on home servers
Human-readable grants compiled into signed network policy.
Generation 184 is active on 12 devices.
One-use offline codes with a 24-hour cooling-off window and session-wide containment.
Generate codes and keep them outside Nockset. Existing codes are invalidated when replaced.
Effective service access. Broad device-to-device access is not implied.
Owner devices -> SSH and HTTPS on home servers
Engineering group -> SSH on production hosts
Support group -> Health endpoints; administration excluded
Evaluate an exact identity, service, and action before publishing.