Final perfected scoring / ranking / analysis

Sovereign Home Automation Stack — Final Scoring, Ranking, and Structural Analysis

A full HTML/CSS conversion of the final model: scoring framework, weighted criteria, composite ranking, tiered role analysis, and structural reading notes for Mosquitto/MQTT, Zigbee2MQTT, BTHome, Node-RED, Tasmota, ESPHome, WLED, ZHA, Z-Wave JS, Frigate, openHAB, rtl_433, Home Assistant, Assist, Voice Preview Edition, and Scrypted.

Model bias

Structural sovereignty is weighted above convenience. FOSS purity, governance, local-first operation, privacy, and open protocols outrank polish.

Cross-role caveat

Protocols, daemons, firmware, orchestration shells, and hardware endpoints are scored on one scale. Cross-role comparisons work best as alignment signals, not as literal like-for-like equivalence.

Linking rule

Official project pages, docs, install paths, foundations, cloud services, and billing layers are linked inline throughout the document instead of being isolated in an appendix.

Frame

Final frame

This ranking treats the stack as a sovereignty-alignment problem rather than a consumer convenience problem. The question is not merely which project is effective, popular, or easy to deploy. The question is which projects most cleanly instantiate a stack that is open, locally controlled, privacy-respecting, modular, difficult to capture, and structurally resistant to vendor lock-in.

The result is a hierarchy where core message buses, open protocol bridges, and de-clouded firmware score highest; large orchestration shells score well but lose points where company gravity, cloud subscription pathways, or broader attack surfaces become structurally relevant; and mixed-sovereignty bridges score lowest where paid gating, cloud tunnels, and platform entanglement become central to the operating model.

Highest-alignment layer

Mosquitto/MQTT, Zigbee2MQTT, BTHome, Node-RED, Tasmota, ESPHome, and WLED form the strongest core under this model.

Orchestration layer

openHAB, Home Assistant, Assist, and Voice Preview Edition remain powerful layers, but governance and cloud gravity matter more here than in the infrastructure tier.

High-alignment sensing

Frigate scores strongly on local processing and privacy, but runtime complexity and hardware demands keep it below the lightest-weight daemons and protocol bridges.

Mixed-sovereignty bridge

Scrypted remains powerful where camera bridging into Apple, Google, Amazon, or Home Assistant is required, but subscription-gated NVR features, cloud access paths, and licensing ambiguity pull it sharply downward in a strict sovereignty model.

Methodology

Final scoring model

Seven criteria, each scored 0–100, then combined by weight into a single composite. The model is intentionally hostile to lock-in, cloud dependence, and governance capture.

15%

FOSS Purity & Licensing

Measures how cleanly the core is licensed under standard open-source terms, and how much critical capability is hidden behind closed, unclear, or paid-only layers.

12%

Governance & Capture Risk

Measures who controls release direction, stewardship, and strategic drift: foundation, nonprofit, company, or concentrated maintainer core.

17%

Local-First vs Cloud Gravity

Measures not only whether local operation is possible, but whether the default path pushes toward accounts, cloud tunnels, subscriptions, or managed services.

13%

Privacy / Telemetry Surface

Measures telemetry, logging, accidental data leakage, and the visibility of third-party endpoints in common or strongly promoted setups.

13%

Open Protocol & Vendor Independence

Measures how strongly the project relies on open standards and how aggressively it breaks proprietary hubs, clouds, or walled gardens.

16%

Stack Role & Composability

Measures how well the project behaves as a modular building block through MQTT, HTTP APIs, event hooks, or direct interoperability with adjacent tools.

14%

Operational Simplicity & Runtime Resilience

Measures installation and upgrade friction, hardware demands, failure modes, and whether the system remains tractable under constrained or degraded conditions.

Composite output

Final ranking table

Sorted by weighted composite. Links appear directly inside each row so the table can function as both scorecard and navigation surface.

# Project FOSS Gov Local Privacy Open Proto Composability Simplicity Composite
1
Message spine / broker
9795999899979497.1
2
Zigbee bridge / MQTT layer
97869996100968894.9
3
Logic / automation glue
9695979293969094.3
4
BLE sensor protocol / broadcast format
9692998899958894.1
5
ESP de-cloud firmware
9588999798928693.8
6
Declarative device firmware
9590979493968893.5
7
LED control firmware
9588989693909293.3
8
Zigbee layer inside Home Assistant
9488989497899093.0
9
Z-Wave driver / controller layer
9488979586948892.0
10
Local NVR / AI detection
9584999794947892.0
11
Vendor-neutral orchestration shell
9694959291908391.6
12
RF decoder / SDR bridge
9686999897897291.2
13
Primary orchestration / integration shell
9586908790988590.5
14
Voice layer for Home Assistant
9586908995938290.2
15
Dedicated voice hardware endpoint
8684918994908788.8
16
Camera bridge / NVR / cloud-linked remote layer
6068657288908074.6
Detailed reading

Tiered role analysis

Each block groups projects by stack role and preserves the full narrative frame behind the numeric ranking.

Core message spine & RF abstraction

Highest leverage infrastructure

The strongest zone in the stack. These projects carry the cleanest combination of open protocol alignment, local operation, de-lock-in behavior, and composability.

Role: canonical pub/sub spineEclipse stewardshipMinimal cloud gravity

Eclipse Mosquitto is the canonical message spine: a lightweight broker centered on the open MQTT protocol, with a clean licensing story and mature governance under the Eclipse ecosystem.

The broker itself is structurally simple, local by default, and broadly deployable across single-board computers and larger servers. The only meaningful complexity lives in secure deployment details such as TLS and ACLs rather than in the runtime model itself. Under this framework, it remains the clearest top-ranked substrate.

Role: Zigbee → MQTT bridgeGPLv3Coordinator-based local control

Zigbee2MQTT scores near the top because it directly attacks proprietary Zigbee hubs by routing device state into a neutral message bus. The official documentation explicitly frames it as a way to use Zigbee devices without the vendor bridge or gateway.

The slight discount comes from governance concentration and operational complexity: adapter compatibility, firmware choices, Node.js runtime overhead, and device quirks still introduce more moving parts than a pure broker.

Role: BLE broadcast standardBattery-efficient sensorsEncryption optional, not forced

BTHome is not a conventional application; it is an open BLE sensor format. That distinction matters. Its score is driven by the openness of the spec, the low-friction local broadcast model, and its ability to standardize tiny sensors across vendors and implementations.

The privacy score is intentionally lower than the rest of the top tier because encryption is supported rather than universal. The ceiling is high, but many deployments do not begin in encrypted form.

Role: Zigbee in Home Assistantzigpy-basedLess general than MQTT-native bridges

ZHA receives a strong score because it can replace proprietary Zigbee gateways using local coordinators and an open-source Python stack. It is a valid de-hub path.

The discount versus Zigbee2MQTT is composability: ZHA is excellent inside Home Assistant, but it is not as neutral a bus layer as a Zigbee → MQTT bridge that any adjacent service can consume.

Role: local Z-Wave controller layerStrong local operationUnderlying RF stack is centrally controlled

Z-Wave JS is healthy, open software that gives local control over Z-Wave networks. The reason it trails the Zigbee layer is not poor software quality, but the structural centralization of Z-Wave as an ecosystem.

In other words: the software is doing liberation work inside a more compromised protocol universe. The score reflects both truths at once.

Role: SDR/RF decoderGeneric ISM-band ingestCLI-heavy by nature

rtl_433 is a freedom tool disguised as an RF utility. It listens to low-cost proprietary radios and turns them into structured data, often routed onward into MQTT or adjacent systems.

The simplicity haircut is deliberate. This is not a mainstream plug-and-play layer; it assumes radio curiosity, build tolerance, and command-line comfort. The power is immense, but it is operator-intensive.

Edge firmware & device-level sovereignty

De-clouded endpoints

This layer turns chips and vendor-tainted hardware into locally owned devices. The strongest projects here strip out remote dependencies and expose neutral control paths.

Role: vendor firmware replacementMQTT / HTTP / serialHigh operator leverage

Tasmota ranks high because it directly replaces vendor firmware on ESP-based smart plugs, sensors, and switches with a local-first control layer. It turns cloud-bound commodity devices into self-owned nodes.

The cost is the usual firmware reality: flashing, recovery, board variation, and occasional unbricking work. Once installed, however, the runtime is durable and structurally aligned.

Role: declarative firmware compilerYAML-defined devicesStrong HA affinity

ESPHome functions like a device compiler for sovereignty-friendly hardware. YAML definitions become concrete edge devices with a deep catalog of components and clean local integration patterns.

The score stays just below Tasmota because governance and ecosystem gravity are more closely tied to the Home Assistant universe, but the composability and device-building power are exceptional.

Role: sovereign lighting controlFast setupPolished local web UI

WLED scores well because it combines true local control, strong documentation, broad controller support, and a very low-friction installation path. It is one of the cleanest examples of a project that is both sovereign and friendly.

Its scope is narrower than a generic device firmware platform, which is why it sits slightly below ESPHome, but within its lane it is one of the most polished local-first tools in the stack.

Logic & orchestration

Control plane

This is the layer where system shape becomes visible: either as neutral glue or as a full orchestration shell with broader UX, more integrations, and greater governance gravity.

Role: flow-based automation glueApache 2.0Foundation-backed

Node-RED earns a top-tier position because it is pure glue. It does not insist on owning the stack. It connects MQTT, HTTP, TCP, serial, and countless other pathways into a programmable graph without introducing first-party cloud gravity.

Its governance profile is unusually strong for this category because of the OpenJS Foundation relationship, and its operational model stays relatively simple until the flows themselves become large.

Role: vendor-neutral automation shellNonprofit-backedSteeper learning curve

openHAB scores well because the governance story is unusually clean: nonprofit support, explicit vendor-neutral positioning, and no central company acting as a cloud gravity well. That matters.

The tradeoff is ergonomics. The platform is powerful and broad, but more austere than Home Assistant and more demanding during onboarding. Under this model, that cost is acceptable because the governance advantage is real.

Role: dominant integration shellHuge ecosystemCloud path actively promoted

Home Assistant remains one of the most capable orchestration shells available. The integration breadth is extraordinary, and the local-first ideal is clearly present in both branding and architecture.

The reason it scores below openHAB here is not lack of capability but cloud gravity and company influence. The simplest path for remote access, some voice flows, and several convenience features runs through Home Assistant Cloud and Nabu Casa. The platform can still be fully local; the score reflects the default pressure vector, not an impossibility claim.

Vision & sensing

Local perception

A narrower category with one dominant entry: highly aligned in privacy and locality, but significantly heavier in runtime demands than the lighter infrastructure tier.

Role: local NVR + AI detectionRTSP/IP-nativeHardware-intensive

Frigate scores strongly because it preserves the essential properties the model values most: local processing, local retention, privacy-focused posture, and open interoperability with adjacent tools through MQTT and event streams.

The main penalty is runtime cost. Accelerators, storage planning, ffmpeg tuning, and camera stream design all raise operational burden. Architecturally it is highly aligned; operationally it is not lightweight.

Voice layer

Human interface

Voice introduces a recurring tension: local-first ideals are present, but cloud-assisted paths remain visibly available and often easier.

Role: voice front end for HALocal STT/TTS possibleCloud assist paths also available

Assist is strong because it can be genuinely local. Pipelines can be assembled from local speech-to-text, local text-to-speech, and local intent handling. In principle, the voice surface does not need to leave the premises.

The score drops because voice is a complexity magnet. The more fully local the design becomes, the more resources and configuration discipline it demands; meanwhile cloud-assisted options remain visibly present in the ecosystem.

Role: dedicated voice hardware endpointCommercial hardwareDeep HA coupling

Voice Preview Edition scores as a competent hardware endpoint for a private voice stack, but it does not reach the same purity as the software core. It is a product inside a vendor-shaped ecosystem, even if the surrounding philosophy remains open and privacy-focused.

Its main strengths are integration quality and setup smoothness. Its main discounts are hardware openness, company gravity, and the continuing visibility of cloud-assisted modes.

Mixed-sovereignty bridge

Boundary layer

Technically capable, strategically useful, but structurally compromised relative to the rest of the list.

Role: camera bridge / NVR / tunnel surfaceExcellent interoperabilitySubscription-gated NVR path

Scrypted is technically impressive. It is excellent at bridging cameras into Apple Home, Google Home, Alexa, and Home Assistant; it is fast; and its protocol interoperability is real.

The low rank comes from structural compromises, not from lack of engineering talent. The NVR layer is tied to subscriptions and billing, remote access routes through explicit cloud enablement, and the overall project shape is far less clean in licensing and governance terms than the rest of the stack.

Interpretation

How to read the ranking

The composite score is best treated as a sovereignty-alignment index. It highlights structural fit, not mere feature abundance.

1. Pure sovereign core

Mosquitto/MQTT, Zigbee2MQTT, BTHome, Tasmota, ESPHome, WLED, rtl_433, and Node-RED form the strongest locally sovereign substrate.

2. Orchestration shells

openHAB and Home Assistant remain central options for full-system control, but their scores are shaped by different governance and cloud-gravity profiles.

3. Heavy but aligned sensing

Frigate belongs in a high-alignment stack, but its runtime demands prevent it from scoring like the lightest infrastructure layers.

4. Boundary tool

Scrypted is best treated as an optional bridge for external ecosystems rather than as a foundational component of a strict local-first sovereign core.