Every gateway is managed by product, hardware profile, firmware target, and capability identity. A device cannot claim a capability it does not have or receive firmware for a different target.
Capability, hardware profile, and firmware target remain distinct. Each device carries only physically present and accepted capabilities.
gateway_lite_verify
A compact WiFi + BLE gateway for attendance and physical-presence verification points.
gateway_lite_access
Connects existing door and turnstile infrastructure with secure actuation and sensor evidence.
gateway_standard_access
An enterprise access point with primary Ethernet, backup WiFi, BLE, and NFC.
gateway_pro_access
A full enterprise gateway for secure UWB ranging and High Assurance.
Identity, server authority, signed configuration, target-bound OTA, secret-free audit trails, and fail-closed behavior are consistent across the product family. The available assurance level is explicitly separated by each model’s accepted physical capabilities.
Secure production provisioning, non-exportable device keys, key rotation, and revocation.
Signed manifest, correct firmware target, anti-rollback, boot verification, and safe recovery.
Relay, door contact, REX, tamper, turnstile direction, and fault classes.
No unintended pulse during boot, reset, brownout, network uncertainty, or policy uncertainty.
Correct cell/organization binding, capability acceptance, and signed configuration.
Network, firmware, key, tamper, sensor, calibration, and health telemetry.
Let us evaluate network, I/O, assurance, UWB, and lifecycle requirements together.