Sovereign Authorization

Device enrollment — register the authenticators that authorize soul writes and tier-1 commands.
Person = this device’s Face ID / Touch ID. Possession = a YubiKey.

Name this authenticator

Checking this browser…

Enrolled this session

Nothing yet — enroll your first authenticator above.

Internal · fail-closed · never leaves the WireGuard network.
rpID sas.tsho.us