Lots of devices have tamper alarm functionality of some kind. There’s been a lot of discussion about this both internally and in the community, but I think it’s best to keep it simple:
tamper — [“clear”, “detected”]
(Based on smoke detector capability.) This event would be expected to have a detailed account of the tamper alert as the descriptionText, and notifications triggered by this event would use that.
For devices that don’t tell us when the “tampering event” is over. Usually wouldn’t be a real device command, it would just change the state of the ‘tamper’ attribute.
And yes, we can work this capability into an automatic notification system like was done for Battery.
I would also like to see an option to use the accelerometer on the SmartSense Multi to tell me if it’s fallen off the door.