Device confirmation#
The native bridge uses LocalAuthentication for device-owner confirmation of self financial actions. Browser confirmation and counterparty actions are explicitly simulated. None performs customer KYC.
Local protections#
Scope-bound short-lived approval records, idempotency references and safe profile projections model intended controls. The local consistency digest is not a cryptographic signature. Local storage is not an authorization server.
Before production#
- Authority
- Server-side identity, session authorization, receipt validation and durable idempotency.
- Data
- Encryption, least-privilege access, retention and audited access to sensitive records.
- Operations
- Provider reconciliation, incident response, key management and verified webhook handling.
- Decision review
- Transparent restrictions, evidence handling and a real appeals process.