ACL Model (Publish vs Subscribe)

Each device is isolated to its own MQTT topic namespace.

Device can publish

• devices/{uid}/telemetry
• devices/{uid}/status
• devices/{uid}/ota
• devices/{uid}/user/telemetry
• devices/{uid}/user/event

Device can subscribe

• devices/{uid}/command

Device cannot do

• Publish to devices/{uid}/command
• Access topics of another device UID

This isolation helps keep devices separated and secure.