Bug Fixes

• build: drop esp_websocket_client override_path - the lock is now portable (d2944da)
• hal: correct thermistor B value for fitted TDK NTC (4067 -> 3435) (67fe940)
• ocpp: correct malformed AuthCtrlr variable name (d4887ae)
• ocpp: harden device model transaction policies (dfe8fd8)
• ocpp: report the real WebSocketPingInterval (10s, IDF default) (cc5bcd0)
• sensor-confidence: close authority bypass and move journal writes off sys_evt (8220b5f)
• database: serialize all SQLite entry through one process-wide gate (a1555ad)
• sensor-confidence: defer journal startup from OCPP receive path (9150b5f)
• sensor-confidence: size reporter stack for journal begin (6144 -> 8192) (c729d16)
• nvs: log absent keys at debug with the key name, not as errors (55233bb)
• sensor-confidence: self-heal a corrupted journal database (b7e7e8a)
• monitor: stop counting OTA download size as network TX (5687098)
• sensor-confidence: delete SQLite sidecar files when recreating the journal (fa74bd4)
• sensor-confidence: probe sqlite_master instead of the compiled-out quick_check (f2c5082)
• crash: poison-pill the boot-time core dump parse (e9bbc6b)
• database: shared SQLite poison-pill guard for every boot-path open (5ce4727)
• database: temp_store=MEMORY on every connection - the esp32 VFS rejects temp files (be522fe)
• sensor-confidence: never probe an empty database - THAT was the crash all along (19d071b)
• sensor-confidence: poison-pill sentinel - never let SQLite reopen a file that crashed it (b0e5e43)
• sensor-confidence: rowid-only ordering - sorter temp files cannot exist on this VFS (b0a733a)
• sqlite-vfs: back anonymous temp files with the in-RAM file implementation (19ebc7c)
• sensor-confidence: delete the sqlite_master probe - the probe WAS the crash (1a29a5f)
• sensor-confidence: open the journal on the main task's stack, like every database that works (98556f1)
• sqlite: put the rollback journal on flash and make xTruncate real (c696cad)
• sqlite: restore real fsync and use the proven sqlite_master probe (10c3c17)
• system-monitor: label network stats as the app-layer WS counters they are (3df522d)
• logging: 64-deep PSRAM log queue; security lines never silently dropped (24a1b86)
• ota: let the preflight-reboot resume survive the factory stale-state guard (dc80072)

Features

• firmware: add sensor confidence control authority (0521653)
• ocpp: complete the 2.0.1 device model (missing components + variables) (331173e)
• ocpp: deauthorise on invalid idToken; TxCtrlr StopTxOnInvalidId/MaxEnergyOnInvalidId (dec5175)
• ocpp: honour TxCtrlr.EVConnectionTimeOut (writable, PSRAM-safe) [TxCtrlr 1/n] (f9951dc)
• ocpp: make OCPPCommCtrlr timing set CSMS-writable and honoured (f6e9ecc)
• ocpp: TxStartPoint/TxStopPoint ReadWrite with validated accept-supported [TxCtrlr 2/n] (c06ee7d)
• sensor-confidence: OCPP-controlled publication via SensorConfidenceCtrlr.Enabled (af1019b)
• ocpp: support vendor-scoped variables (327c8c1)
• ocpp: runtime control for readiness telemetry via ReadinessCtrlr.Enabled (d312e36)
• ble: demand policy - BLE only when it can actually be needed (1e611c8)
• sensor-confidence: baseline health tier - idle plausibility lifts Unknown to Ok (5c52ba4)
• sensor-confidence: severity-gated telemetry with CSMS-tunable summary cadence (cb44ae1)
• sensor-confidence: single-constant desk-calibration switch (936b660)
• ozev: BLE provisioning auth enforced by default (bfa4d41)
• ozev: persistent UTC security log - persist at raise, log access attempts (9b70024)
• ozev: randomised delay remotely increasable to 1,800 seconds (0ce613e)
• ozev: adoption code becomes the local credential; PLUGSTREAM fallback dies (b0e5312)
• ozev: signed OTA images - firmware authenticity without eFuses (4957bd8)
• storage: quiesce SQLite on every intentional restart (ab5add6)

Performance Improvements

• ram: sensor confidence diet + reconnect-path stack sizing (e5620bd)