Feature 2
Live control
Prove someone with the key can respond right now.
Live alpha - scan page challenge + owner sign on /created/
About this feature
Why it matters
Revoke proves mutability; live control proves recent key possession in an in-person moment - separate from vouches, registration, or static “active” status.
Design decisions
Short-lived challenge (~120s). Scanner polls; owner signs on a key-holding device. Visually separate block on scan - never mixed with human trust or card status. Success copy is explicit: does not prove legal identity or physical ownership. Proof does not mutate card, QR, or vouch state.
Safety · privacy · security
Inactive or revoked QRs cannot create challenges. Signed responses use replay-safe payloads. No phone number, email, or account login required.
Limits
Alpha: no persistent proof history, permissions, or access control. A stolen key can pass live control. Screenshot of success state is not prevented.
Future directions
Ephemeral permissions, event handoff, wearable rules, clearer expired/failed UX (M7 step 2+). Still bounded: never a legal-ID substitute.