God's controls are usable and need no co-signer (master section 10 R7)

Shipped: October 18, 2026 at 10:54 PM UTC
Author: Kamo
Commit: b1f6fc0

Owner 2026-10-18: god (the platform owner) operates every IoT function; in another org only inside break-glass. The manifest's caller.god (@kamo/iot-core 0.9.0 manifestGod) now: - lets controlState draw a SAFETY_CRITICAL control no approver enabled (a manifest block and view-only still win); - drops the co-signer step from the command run (planSubmission(fn, god)); the confirmation and the password re-check stay; - lets god's own god-mode window edit access on the device page (someone else's window stays view-only, and the server's view-only verdict always wins).

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing