Owner boundary · OPG
One clear view. One private door.
The app keeps its own recovered identity. This checkpoint protects the public edge without touching it.
Encrypted transitRevocable sessionBearer-safe
Enter the control plane
One private checkpoint before the recovered OPG device can continue.