TR-CORE-WATER-GATEWAY / Teal / Review draft

Authenticated telemetry gateway

Terminology revised · September 12 evidence

Later individual Teal rerun. The reported execution status is historical and is not a new test result.

TEAL LIBRARY RERUN  |  12 SEPTEMBER 2026  |  Michael Patrick Bangel
25
TEAL-RERUN-03-B001 | SOURCE_REVIEW_ONLY
TR-CORE-WATER-GATEWAY / Authenticated telemetry
gateway
IF
A Water-Telemetry/1 packet reaches the C# host.
HOW
Check HMAC, identity, firmware/configuration roots, positive monotonic sequence and freshness before state
advancement. The host owns risk history and ignores caller-supplied history.
THEN
Reject replay or policy mismatch; record accepted frames before returning. HMAC is the current
implementation, not a completed post-quantum transport.
CURRENT EVIDENCE
This requirement paper is source-grounded. Native .NET, C++/Rust/R host checks and physical execution
were not rerun.
REMAINING REQUIREMENT
Use the source and recorded case evidence to close remaining per-branch, native-host and full-contract coverage gaps.
SOURCE REFERENCES
associated-core:products/water/dotnet/Water.Core/AuthenticatedGateway.cs

Publication is pending owner review. White papers are excluded.