Driver validation status

The capability matrix shows what each driver claims it can do — generated straight from the signed pack, so it never drifts. This page shows what’s been proven. Most drivers were authored from vendor documentation and adversarially cross-checked but are honestly not yet device-tested; this page never dresses that up as more than it is.

Mirrors the validation ledger the console reads (C:\Skans\driver-validation-ledger.json); regenerate with SkansCP --driver-validation after each test pass. A cell is green only when an executed test produced it — never hand-authored ahead of the proof.

Table + counts generated 2026-07-17 16:42 UTC from the validation ledger via SkansCP --driver-validation — never hand-edited.

Cert-deploy (120 drivers): 8 hardware-validated · 9 emulation-validated · 1 known-issue · 102 spec-verified (pending a device). The monitor columns (SNMP/syslog) are marked only where a real device proved them.

Validated so far — evidence #

• arubacx · cert-deploy — emulation on Aruba AOS-CX simulator 10.13.1180 (EVE-NG): served serial == issued serial, chained to Skans Root CA; 8 driver bugs found + fixed during validation

• arubacx · config-backup — emulation on Aruba AOS-CX simulator: running-config captured + change-detected across a real edit

• arubacx · rotate — emulation on Aruba AOS-CX simulator: rotated + re-auth verified + vault synced + old password rejected

• arubacx · snmp — emulation on Aruba AOS-CX simulator: interface metrics land fresh (source-filtered, <10 min window) in skans-metrics — the check proves the poller is live now, not that a doc once existed

• arubacx · syslog — emulation on Aruba AOS-CX simulator: a triggered config-change event arrives fresh (<3 min, source-filtered) in skans-netlog — a stale/dead collector fails this

• opnsense · snmp / syslog — emulation on OPNsense (EVE-NG, 192.168.102.77): 342 fresh SNMP + 974 fresh syslog docs (source-filtered, <10 min) — measured live

• axis · cert-deploy — hardware on Axis camera: hardware-validated cert-deploy

• bosch · cert-deploy — hardware on Bosch camera: hardware-validated cert-deploy

• fs · cert-deploy — hardware on FS switch: hardware-validated cert-deploy

• hanwha · cert-deploy — hardware on Hanwha camera: hardware-validated cert-deploy

• onvif · cert-deploy — hardware on ONVIF device: hardware-validated cert-deploy (generic ONVIF)

• opnsense · cert-deploy — known-issue on OPNsense (EVE-NG): cert imported to the trust store; final GUI bind is a documented one-time manual step (no bind API upstream, #9399)

• redfish · cert-deploy — hardware on Redfish BMC: hardware-validated cert-deploy

• twon · cert-deploy — hardware on 2N intercom: hardware-validated cert-deploy

• unifi · cert-deploy — hardware on UniFi controller: hardware-validated

• unifi · nac — known-issue on UniFi + Windows NPS: 802.1X MAB was proven live once then reverted — nothing is 802.1X-enforced on the fabric today. Controller TLS + SSH host key are pinned. Re-validate before showing this green.

• cisco9200 · cert-deploy / config-backup — emulation on Catalyst 9000v UADP 17.18 (CML): served serial == issued serial (cert); full running-config captured by --backup-configs (57 KB) — not a hostname grep.

• cisco9300 · cert-deploy / config-backup — emulation on Catalyst 9000v UADP (CML): cert serial match; full running-config captured (39 KB).

• cisco9500 · cert-deploy / config-backup / snmp — emulation on Catalyst 9000v Q200 (CML): cert serial match; full running-config (34 KB); SNMP poll proven — 201 iface.oper metric docs in skans-metrics via DNAT UDP-161.

• ciscowlc · cert-deploy / config-backup / snmp / syslog — emulation on Catalyst 9800-CL 17.18 (CML): cert on :443 web-admin; 22 KB running-config with SET-GOLDEN + DRIFT proven in the console Config tab (real change → DRIFT badge → re-golden → in-sync); SNMP poll (43 docs) + syslog & SNMP traps (483 skans-netlog docs, rendered in Logs). LAN-bridged so it can reach .92.

• ciscoasa · cert-deploy — emulation on ASAv 9.24 (CML): PKCS#12 trustpoint bound to HTTPS, on-wire self-verify.

• ciscoasa · config-backup — known-issue on ASAv 9.24 (CML): enable-mode fix reaches priv-exec + reads real config; the emulated ASAv stalls its SSH stream under Renci.SshNet after ~10 lines (openssh streams the full 900-line config in 2.6s) — an emulation/library quirk, not a logic bug.

• ciscoiosxe · cert-deploy — emulation on Cat8000v / CSR1000v / IOL-XE (CML): PKCS#12 trustpoint import across 3 router platforms.

• cisconxos · cert-deploy — emulation on Nexus 9300v NX-OS 10.6 (CML): NX-API :443 serves Skans Root CA, serial match.

• ciscoftd · cert-deploy — emulation on Cisco FTDv (FDM 10.0, CML): FDM REST cert-deploy proven — the management HTTPS listener serves the Skans Root CA leaf, served serial == issued. 3 driver bugs found+fixed (upsert 422-not-400, issuing-CA upload, WebUICertificate.trustChain) + FDM initial-provision via REST.

Next #

• Device support matrix — what each driver claims (auto-generated from the pack)
• Enroll a device — the cert-deploy lane in depth
• Syslog ingestion and SNMP monitoring — the monitor lanes