TravelRouter documentation Experimental

Verification record

Software

• Unit/HTTP tests cover mandatory setup, credential hashing/rotation, sessions, CSRF/Host/Origin validation, unsafe inputs, DNS modes, firewall policy, filtering, encrypted backups, signed updates and archive traversal/version rejection.
• A fresh independent whole-project review identified and led to fixes for DNS protection during tunnel transitions, FAT32 package staging, and imported schema validation. Additional fixes enforce staged update versions and refresh missing imported country data promptly.
• CI proves installation from the embedded signed repositories with networking disabled, checks all enabled OpenRC service files, and invokes actual Unbound, dnsmasq, nftables, sing-box and hostapd parsers.
• The added image boot test uses QEMU and simulated Wi-Fi radios to exercise the finished image's service startup and client protocols. It reproduced a stopped resolver and the controller stopping itself through OpenRC's reverse dependency handling during a DNS restart. Both generic UEFI installers completed disk installation and independent full-image verification, then reached the same runtime failure. Corrections are implemented; complete client-flow and reboot qualification of the corrected images is pending.
• CodeQL scans Python, JavaScript and workflows. Secret scanning, dependency audit, lint, tests and an image package vulnerability scan gate releases.
• The local disposable browser preview verified forced setup, authenticated dashboard rendering, navigation, local fonts, safe untrusted SSID text, live metrics and logs. The 390 px mobile view was visually inspected; layout width checks were performed at 320 px. Desktop was inspected at 1280 px.

Remaining physical qualification

The v0.1.0 image was flashed and read-back verified on a CM5 Rev 1.0 on 2026-11-04. The physical hotspot and DHCP lease assignment work, but the user reports that Safari cannot reach the local operations panel. Diagnosis is ongoing. Upstream adapter support, public captive login, DNS behavior, VPN/proxy routes, kill-switch packet tests, package updates and reboot persistence remain unverified on the hardware.

The public image is an experimental release, not a completed travel deployment. See the hardware checklist for acceptance criteria.