Optional ReadonlydefaultInitiator the gateway attributes to traffic from this device when the transport carries no workflow context (for example an attended evaluator workstation is "clinician", a bedside monitor is "scheduled").
ReadonlyfirmwareReadonlyidOptional ReadonlyleaseShort-lived credential: after this epoch ms the gateway drops the peer and decide() denies.
Optional ReadonlyoverlayOverlay address assigned at enrollment (WireGuard mode), e.g. "10.66.0.12".
ReadonlypublicHex encoded Ed25519 public key used for device attestation.
ReadonlyrevokedReadonlyroleReadonlytenantTenant path, root first, e.g. ["platform","oem-a","hs-1","fac-1","unit-icu","grp-1"].
Optional ReadonlywgWireGuard (X25519) public key, base64, registered at enrollment.
A registered device identity. Identity is attested at enrollment.