Under the hood
Useful2 Signal3
Remote sessions spot their own echoed requests and renew device proof when unverified.
What's wrong with this entry?
Anonymous. No account, no email.
What
A remote session client now recognises when a control request it sent is echoed back to it from another source, checks the device attestation status on that frame, and renews its device proof when the status is unverified.
Details
- The client keeps the uuids of its own requests and only takes this path when the returned uuid matches one it sent; previously such frames were dropped.
- A new echo callback fires and is wired to a one-shot handler on the pending request.
- No gate; reachable on any remote session connection.
Evidence
echoed from source=
Strings lifted out of the shipped bundle, so the claim above can be checked against them.