Identity
Controllers and services use distinct credentials with limited permissions and rotation paths.
FRAME DOCUMENTATION
Security model
The useful parts of remote control without the usual collection of accidental remote-code-execution features.
Command constraints
Operations, targets, parameters, lifetimes, and signatures are validated before execution.
Network exposure
Field devices initiate outbound connections. Administrative services remain private or pass through authenticated tunnels.
Audit and recovery
Security-relevant actions are logged, replay is rejected, and deployments include revocation and recovery procedures.