Garry Tan a83292b1ed fix(ios-qa): boot token out of os_log entirely; IPv4 listener pinned to loopback at the socket ... The StateServer's bootstrap announce logged the live boot token with privacy: .public — and nothing consumed it: the daemon has read the token from the 0600 app-container file since the devicectl copy flow landed. The log line handed a credential to anything reading the unified log during the launch window. It now announces port/build only. The IPv4 listener bound the wildcard interface and relied on the per-connection peer check alone; IPv4 has no CoreDevice tunnel path, so it now binds 127.0.0.1 via requiredLocalEndpoint at the socket level. IPv6 keeps the wildcard bind for CoreDevice ULA peers by design. Static pins cover both the template and the fixture app copy. Ported from time-attack/gstack (GStack 2). Co-authored-by: Sina Matian <sina@time-attack.dev> Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-08-14 12:37:45 -07:00
..
DebugBridgeManager.swift	fix(ios-qa): generate app-owned bridge accessors deterministically	2026-07-14 16:35:30 -07:00
StateServer.swift	fix(ios-qa): boot token out of os_log entirely; IPv4 listener pinned to loopback at the socket	2026-08-14 12:37:45 -07:00