The phone signs an offline ECDSA P-256 challenge inside its Secure Enclave. The cloud can carry the command, but it never gets to decide that the door opens.
What's inside
- Walk-up detection from an iBeacon arrival state machine.
- Motor safety: watchdog-capped servo control, jam detection from learned travel, and a failsafe when the link drops.
- Every module is split into a hardware half and a host-testable half. 411 tests pass with no board attached. Hardware bring-up is next.

