Authentication

Local confirmation models exact intent; production authentication is not implemented.

Native confirmation#

Self financial actions in the iPhone app can invoke device-owner authentication. The result allows the UI to issue a local scoped approval. This confirms the device owner, not the customer’s legal identity.

Mock approval#

Example

const approval = api.auth.issue(
  'me', api.payments.paymentScope(intent),
  'demo-confirmation'
);
// Counterparties use explicit simulated-counterparty actions.

Production work#

Use server-authenticated actors, secure session handling, appropriate step-up approval and immutable intent records. Client-written proof records and local hashes must never authorize a real payment.