Return

Companion owns the device's physical capture/playback controls and indicators, visible disclosure, local interaction state, and reconnect. Tether owns reachability; Ward proves application, device, Principal, scopes, and object authority; Echo owns each speech attempt, audio custody, processing, and delivery/playback chronology; Spellweaver, Workers, and Phylactery own admission and Run delivery; the selected Composition owns domain records and effects.

The device client carries no provider, database, workflow, or host-lifecycle credential. It distinguishes stop speaking from cancel the session, and keeps text visible before or beside audio. A spoken “yes” is never sufficient authority for a consequential effect.

Raw voice is restricted; transcript and reply are at least private. Audio is ephemeral by default and never training material merely because it was captured. Malformed, stale, replayed, out-of-order, or oversized frames fail closed.

Reconnect asks for the committed result by Principal and utterance identity. It does not resend audio, replay Intent, or deliver an expired command. An offline recording is a short-lived draft requiring review after reconnect, never an automatically queued effect. Enrollment revocation and destination export or deletion remain separate owner actions.

Proving the route

Use a fifteen-second local Android fixture: separate tunnel and application keys, local speech recognition, one text-capable destination, optional synthesis, ephemeral audio, durable text, and reconnect by utterance id. Test stolen tunnel key, revoked application key, replay, object guessing, transcript injection, disconnect, expiry, and locked-device playback. No public proxy, ambient capture, mobile approval, administration, or medical promise enters the proof.