[bigbrett]

• Adds server-side check for expected client ID on a given server context
• Adds server-side comm-connect callback for enforcing user-specified constraints on connect

[Copilot]

🟢 Approval recommended

No active review issues block approval of the COMM INIT client identity controls.

No open issues 🎉

What changed in this PR

Adds server-side client identity controls to wolfHSM’s COMM INIT handshake, allowing applications to restrict which client ID can bind to a channel.

Changes:

• Adds an optional expected client ID and application callback, checked before updating the connection’s binding.
• Tests ID validation, callback rejection, check ordering, and reconnect behavior in both test suites.
• Documents identity enforcement and updates the quickstart to bind its channel to client 1.

File	Description
wolfhsm/​wh_server.h	Defines the COMM INIT callback and adds configuration and context fields.
wolfhsm/​wh_comm.h	Adds expected client ID fields to server communication structures.
test/​wh_test_clientserver.c	Adds client ID binding and callback tests to the existing suite.
test-refactor/​wh_test_list.c	Registers the new client ID binding test.
test-refactor/​misc/​wh_test_client_id_binding.c	Adds equivalent coverage in the refactored test suite.
src/​wh_server.c	Validates configured IDs and enforces ID and callback checks during COMM INIT.
src/​wh_comm.c	Copies the configured expected client ID into the server context.
docs/​src/​5-Features.md	Explains client identity controls and their role in namespace isolation.
docs/​src/​3-Quickstart.md	Configures an expected client ID and explains channel binding.

_{Review effort: Balanced}

[billphipps]

Excellent additional feature!