iPhone-first
The phone owns approval, recovery and trust.
This is the dedicated auth surface for Kyber. It handles login, signup, OAuth and recovery while keeping the app flow separate from the main product surface.
The phone owns approval, recovery and trust.
Desktop requests secrets, it never becomes the source of truth.
The relay only carries opaque sessions and encrypted blobs.
This auth web is dedicated to Kyber, not a shared generic login shell.
Whitelisted accounts get a signed admin session and can open /admin.