niccellular fd7fc40255 Add rak4631_lockdown hardened build variant ...

Introduces a new RAK4631 build variant (-DMESHTASTIC_LOCKDOWN=1) with
encrypted flash storage, BLE/USB config access control, and hardened
defaults.

New files:
- variants/nrf52840/rak4631_lockdown/ — PlatformIO env, variant header
- src/security/EncryptedStorage.h/.cpp — AES-128-CTR + HMAC-SHA256
  encrypted proto storage using CC310 hardware, passphrase-gated DEK,
  TTL/boot-count unlock token, backoff on failed attempts
- src/security/APProtect.h/.cpp — UICR APPROTECT (SWD lockout)

Modified files:
- configuration.h — MESHTASTIC_LOCKDOWN flag derives
  PHONEAPI_ACCESS_CONTROL, ENCRYPTED_STORAGE, ENABLE_APPROTECT,
  HARDENED_DEFAULTS (nRF52 only)
- NodeDB.cpp/.h — encrypted loadProto/saveProto, locked-boot early
  return, migration of plaintext files to MENC, hardened defaults,
  saveToDiskNoRetry guard prevents FSCom.format() when storage locked
- PhoneAPI.cpp/.h — per-connection auth reset, redacts channel PSKs
  and security keys for unauthorized clients, revokeAllAuth() for
  Lock Now, post-config TAK_LOCKED/TAK_NEEDS_PROVISION notification
- AdminModule.cpp — passphrase delivery via set_config(security),
  provision/unlock/re-verify flow, Lock Now sentinel (0xFF),
  PKC admin auth callback to PhoneAPI
- PowerFSM.cpp — guard serialEnter() BLE disable on nRF52

2026-02-26 22:15:40 -05:00

..

buzz

Screenless Devices want to mute too! (#9210)

2026-01-08 16:44:05 -06:00

concurrency

RadioLib edge-triggered interrupts robustness (#9658)

2026-02-21 06:14:04 -06:00

detect

fix detection of SCD30 by checking if the size of the return from a 2 byte register read is correct (#9664)

2026-02-16 10:07:07 -06:00

Fusion

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

gps

fix a lot of low level cppcheck warnings (#9623)

2026-02-16 12:28:07 +01:00

graphics

skip header items when enabling the InkHUD menu cursor (#9552)

2026-02-20 06:12:22 -06:00

input

#9623 resolved a local shadow of next_key by converting it to int. (#9665)

2026-02-16 19:39:43 +01:00

mesh

Add rak4631_lockdown hardened build variant

2026-02-26 22:15:40 -05:00

modules

Add rak4631_lockdown hardened build variant

2026-02-26 22:15:40 -05:00

motion

ICM20948 IMU sleep (#9324)

2026-01-15 06:23:40 -06:00

mqtt

fix: respect DontMqttMeBro flag regardless of channel PSK (#9626)

2026-02-16 13:49:58 +01:00

nimble

Don't ever define PIN_LED or BLE_LED_INVERTED (#9494)

2026-01-31 12:15:06 -06:00

platform

fix a lot of low level cppcheck warnings (#9623)

2026-02-16 12:28:07 +01:00

power

NRF52 - power management improvements (#9211)

2026-01-24 08:39:03 -06:00

security

Add rak4631_lockdown hardened build variant

2026-02-26 22:15:40 -05:00

serialization

feat/add sfa30 (#9372)

2026-02-11 14:13:34 -06:00

watchdog

Trunk

2026-01-29 05:56:19 -06:00

airtime.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

airtime.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

AmbientLightingThread.h

workaround NCP5623 and LP5562 I2C builds (#9652)

2026-02-15 00:32:19 +01:00

AudioThread.h

replace delete in AudioThread.h with std::unique_ptr (#9651)

2026-02-15 06:49:16 -06:00

BluetoothCommon.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

BluetoothCommon.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

BluetoothStatus.h

Don't ever define PIN_LED or BLE_LED_INVERTED (#9494)

2026-01-31 12:15:06 -06:00

commands.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

configuration.h

Add rak4631_lockdown hardened build variant

2026-02-26 22:15:40 -05:00

DebugConfiguration.cpp

Pioarduino preparation (#9223)

2026-01-12 09:52:39 -06:00

DebugConfiguration.h

Pioarduino preparation (#9223)

2026-01-12 09:52:39 -06:00

DisplayFormatters.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

DisplayFormatters.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

error.h

Remove deprecated MyNodeInfo fields (#2552)

2023-06-08 08:07:32 -05:00

freertosinc.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

FSCommon.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

FSCommon.h

implement littlefs for stm32 (#5987)

2025-03-21 16:12:27 +01:00

GpioLogic.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

GpioLogic.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

GPSStatus.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

main.cpp

Add rak4631_lockdown hardened build variant

2026-02-26 22:15:40 -05:00

main.h

Revert "Add agc reset attempt (#8163)" (#9702)

2026-02-20 11:25:28 -06:00

memGet.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

memGet.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

meshUtils.cpp

Fix embedded null byte truncation in ATAK strings (#9570)

2026-02-08 11:20:15 -06:00

meshUtils.h

Fix embedded null byte truncation in ATAK strings (#9570)

2026-02-08 11:20:15 -06:00

MessageStore.cpp

BaseUI: Autosave Messages (#9269)

2026-01-12 19:40:44 -06:00

MessageStore.h

BaseUI: Autosave Messages (#9269)

2026-01-12 19:40:44 -06:00

network-stubs.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

NodeStatus.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

Observer.cpp

trunk roundhouse kick

2023-01-21 21:23:24 +01:00

Observer.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

Power.cpp

fix a lot of low level cppcheck warnings (#9623)

2026-02-16 12:28:07 +01:00

power.h

Add support for CW2015 LiPo battery fuel gauge (#9564)

2026-02-07 22:30:14 -06:00

PowerFSM.cpp

Add rak4631_lockdown hardened build variant

2026-02-26 22:15:40 -05:00

PowerFSM.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

PowerFSMThread.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

PowerMon.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

PowerMon.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

PowerStatus.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

RedirectablePrint.cpp

replace delete in RedirectablePrint.cpp with std::unique_ptr (#9642)

2026-02-14 19:32:16 +01:00

RedirectablePrint.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

RF95Configuration.h

Remove unused define (#4620)

2024-09-02 20:08:02 -05:00

SafeFile.cpp

SafeFile: use atomic rename-with-overwrite, rather than non-atomic delete-then-rename (#9296)

2026-01-13 05:57:04 -06:00

SafeFile.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

SerialConsole.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

SerialConsole.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

sleep.cpp

Hold GC1109 FEM power during deep sleep for LNA RX wake (#9572)

2026-02-20 16:12:54 -06:00

sleep.h

2.6 changes (#5806)

2025-03-01 06:18:33 -06:00

SPILock.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

SPILock.h

…

Status.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

target_specific.h

NRF52 bluetooth cleanup and fix (#3328)

2024-03-03 13:56:55 -06:00

xmodem.cpp

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00

xmodem.h

Revert "add a .clang-format file (#9154)" (#9172)

2026-01-04 05:15:53 -06:00