When Remote Control receives a remote command or permission response without a valid device signature, it now:
- Logs the rejection to stderr with details including attestation status and actionable hints.
- Sends an explicit error
control_responseback to the sender, so the remote device knows the request was refused (previously the rejection was silent). - Rate-limits burst warnings: after a threshold, further warnings for the same burst are suppressed with a note.
- Provides specific re-enrollment hints based on the attestation failure type (absent key, keyless device, etc.).
Evidence
Rejection notifier and response writer (search for "Remote Control is rejecting a burst of unsigned remote activity" and "[remote-io] refusal write failed")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.