I'm more interested in the design space than defending this implementation. If bounded cosigners, programmable recovery or a better phone/hardware split interest you, reach out.
I'd love collaborators, adversarial review and competing designs.
Server:
Wallet:
Demo enrollment is invite-only. DM me if you want to try it, and expect to find something broken.