Reading the Unreachable: Lessons from an Outbound-Only Edge Connector for Biometric Attendance Devices on Small-Office Networks

Cloud attendance platforms depend on punches recorded by biometric terminals that sit on small-office networks the cloud cannot reach. We describe the design, and the first production lessons, of a connector: a single static Go binary that runs on an existing, unmanaged office PC, reads three device families over pull protocols, relays two push protocols, and delivers every punch to the cloud over outbound HTTPS only. We make five contributions. (1) An architecture that decouples device reads from cloud delivery through an fsync'd spool with per-punch parking, and authenticates each PC with a locally generated Ed25519 key that signs requests against server-learned time. (2) Reachability techniques for the topologies we met: devices on off-range static addresses, devices one router away, and isolated Wi-Fi. They are built on evidence-gated secondary addresses and bounded discovery. (3) Time semantics for device wall clocks that survive wrong time zones and future-dated clocks. (4) A fail-closed handover protocol that migrates a live fleet from a legacy agent without losing or duplicating punches. (5) A production audit showing that long-lived delivery failures were dominated by onboarding and silent-agent states, not by protocol errors. We close with what remains open: code signing, safe self-update, and reach across sites. A companion nine-part engineering series describes each part of the system in more depth: https://sundarshahithakuri.com.np/blog/an-office-pc-connector-for-attendance-machines