Sovereign Authorization

Device enrollment — register the authenticators that authorize soul writes and tier-1 commands.
Person = this device’s Face ID / Touch ID. Possession = a YubiKey.

Checking this browser…

Enrolled this session

Internal · fail-closed · never leaves the WireGuard network.
rpID sas.tsho.us