Pairing code expiration
required
Remote Security
Public active gate
Screen viewing is live. Native input is owner-gated.
One-time trusted-device enrollment, rotating viewer credentials, renewable host rooms, visible desktop consent, TURN-backed WebRTC, owner-approved native input, allowlisted commands, audit events, device revoke, and emergency stop are implemented. Passkey enrollment and signed notarized packaging remain future hardening.
Visible desktop consent banner
required
Phone and desktop emergency stop
required
MFA or passkey before active control
required
Device registry with revoke
required
Session audit trail
required
Allowlisted CLI commands only
required
No public owner credentials
required
No unattended control by default
required
Security review before screen input ships
required