Access Control Security: Why One Captured Device Shouldn't Burn the Whole Fleet
Blast radius has to be designed, not discovered. What to demand from connected access control: per-device keys, scoped issuers, and a named owner for the offline-door revocation problem.
