Earlier framing wrongly treated the eUICC as immutable and put consumer phones
out of scope. Corrected: we supply a controllable eUICC (removable sysmoEUICC
with SGP.26/private root) that trusts our local osmo-smdpp, so any COTS phone/
modem works via its LPA (EasyEUICC/OpenEUICC or lpac) with no GSMA involvement.
Update the trust-model section, architecture, Phase 3, and open questions.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Grounded in the intended use (SIM-drop AP with pre-registered eSIM batch, QR
captive portal, COTS + software UEs, srsRAN+Open5GS, Pi+Android). Phases 0-4 from
proving live core attach through a local SM-DP+ for test eUICCs, and flags the
GSMA-CI trust constraint that rules out arbitrary consumer phones from a
field-local SM-DP+.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Full working closed-loop eSIM provisioning stack (spec in claude.md / plan/):
Flask API, SQLite subscriber store, credential/profile generator, Open5GS
and free5gc core adapters, captive portal, operational scripts, systemd
units, network configs, and a 44-test suite.
Profile generation currently returns a mock JSON profile; real SGP.22
generation via pySim is the planned Phase-2 upgrade.
Fixes two bugs found while getting the suite green:
- generate_imsi hardcoded a 10-digit MSIN, producing 16-digit IMSIs for a
3-digit MNC; MSIN length is now 15 - len(mcc) - len(mnc).
- check_rate_limit compared timestamps as strings across mismatched formats
(SQLite CURRENT_TIMESTAMP vs Python isoformat); both sides now normalized
via SQLite datetime() so the window check is chronologically correct.
Add .gitignore for venv, caches, runtime config.yaml, and databases.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>