fix: the distributed server accepts tcp connections ... in...

[orbisai0security]

Summary

Fix critical severity security issue in src/distributed_server.cpp.

Vulnerability

Field	Value
ID	V-003
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-003
File	src/distributed_server.cpp:1621

Description: The distributed server accepts TCP connections and processes messages without any authentication mechanism. No OAuth, token-based, TLS mutual authentication, or shared-secret handshake was identified protecting the TCP interface. Any client with network access to the server port can connect and send protocol messages that are processed as legitimate commands, enabling impersonation of authorized nodes.

Changes

• include/tcp_communication.h
• src/tcp_communication.cpp
• src/distributed_server.cpp

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security