Security
Security boundaries you can actually explain.
AVRE separates the local Companion security model from the web-account security model because they protect different things.
Companion device security
- Encrypted private local storage direction
- Password-protected local access
- Recovery material separated from billing/license data
- No raw model/runtime details in customer UI
Website account security
- HTTPS
- Passkey/WebAuthn direction
- Authenticator/TOTP direction
- Recovery codes
- Active-session/device management