Smart home mesh

Voice, speakers and cameras across a house, run on local hardware, that refuses any request it can't verify.

The problem

Home automation usually trusts anything on the network. A house that runs AI agents can't.

The approach

A Python hub and satellite daemons, Swift and Kotlin apps, local speech (Whisper, Piper) and models (Ollama). Every non-health call is signed per principal with HMAC-SHA256 over route, query, body hash, a 30-second window and a one-use nonce. A Cloudflare watchdog notices when a node goes silent.

What stands out

A hostile self-test must refuse replays, default secrets, foreign keys and out-of-role calls before a release passes.
425 tests in the Python suite and 53 Android test tasks.
Watchdog: one Durable Object per node with alarm-driven silence detection.

Measured

425

The smart-home Python suite runs 425 tests, alongside a hostile self-test that must refuse replays and forged calls.

A house that runs agents gets the same gates as production software.

21 Oct 2026