No long-lived private key in the page
The Grant is bound to this page's ephemeral public key.
DIRECT RELAY AUTHORIZATION
Your models.
Any app.
The page creates an ephemeral identity in memory and connects directly to Relay.
LIVE ZERO-BACKEND FLOW
Start a real authorization
Ephemeral private keys exist only in this page's memory.
Unverified Web App
A web origin is not a strong identity.
Relay never sees E2EE plaintext
Remote web apps must use the ModelLine SDK/E2EE.
Access can be revoked at any time
A Grant binds the App and device public keys.