Device posture

Each device carries a small amount of security posture the app surfaces when connected:

• Authentication level (AAL) — the assurance level this session holds (raised by step-up).
• Device certificate — how long this device’s mesh certificate is valid. It reads “not reported yet” until the agent has reported it.

Posture is per-device and read-only; there’s nothing to configure. It exists so you always know what a session actually holds.