The skeleton runs
ESP-IDF project structure, Aliro reader lifecycle, credential store, lock output, NVS configuration, Wi-Fi setup, web service, MQTT and CI builds.
04 / ROADMAP
What is done. What is next.
The roadmap is intentionally blunt. A green check means the repository has evidence. A beta label means it works in a narrower environment than a production access system.
Real NFC frontend
PN532 is now the first real frontend, with SPI/I2C support. The reader has been flashed and booted on ESP32 hardware.
Credential lifecycle via Matter
Matter Door Lock provisioning can supply the reader identity and enroll Aliro endpoint credentials into the persistent access-control store.
Protocol depth
Reader certificates, mailbox exchange, step-up phase and vendor extensions remain deeper Aliro work.
Harden the device
Secure key storage, stronger operational security, multiple locks/readers, OTA maturity and production-grade administration.
Beyond NFC
BLE passive unlock and UWB ranging are part of the broader Aliro direction. They remain future work here.
OPEN QUESTIONS
The hard problems are still visible.
Certification
Interoperability with shipping phone ecosystems is not the same thing as having a production-certified reader.
Secure identity
Production needs protected private-key storage rather than development keys in flash.
NFC timing
Different frontends have different constraints. The project still needs broader validation across hardware.
Administration
Authentication exists in v0.3, but a real access controller still needs a stronger security model and deployment story.