This project sends bounded display packets to a paired MiniToo and optionally reads allowlisted fields from a WebSocket event source.

It must not flash firmware, change Bluetooth pairing, expose a network control listener, persist raw sensing data, or place credentials in URLs or logs.

Report vulnerabilities through GitHub private vulnerability reporting for this repository. Do not open a public issue containing credentials, device identifiers, packet captures, personal sensing data, or exploit details.

1. Pair the MiniToo using macOS settings.
2. Use loopback WebSocket sources unless remote access is explicitly required.
3. Use wss for remote sources.
4. Pass tokens through environment variables.
5. Do not run unreviewed packet files against a device.
6. Treat RF derived vital signs as experimental and nonmedical.