Secure UNS Access Control for Factory MQTT

How it works

This Coreflux LoT notebook implements a small factory Unified Namespace (UNS) security design. A reusable Model builds clean readings from raw/factory/... telemetry, an Action publishes a probe guide, and Rules enforce role-based access for dashboard, device_x, engineer, and root.

Key features

• Reusable model: Defines FactoryDeviceReading for clean factory telemetry.
• Wildcard raw-to-clean Action: Converts raw/factory/+/+/temperature into factory/<line>/<device>/reading.
• Security probe guide: Retained topics summarize expected allow/deny behavior.
• Role-based Rules: Separates raw publish, clean-tree publish, $SYS, and user management access.

What this template does

• Maps raw temperature topics into structured clean readings.
• Uses topic positions and retained engineering-unit metadata.
• Publishes a retained probe tree for quick client testing.
• Applies deny-by-default Rules with explicit role exceptions.

Prerequisites