Pairing code expiration
required
Remote Security
Public active gate
Screen viewing is live. Native input stays gated.
Short-lived sessions, one-time pairing, visible desktop consent, TURN-backed WebRTC, allowlisted commands, audit events, and emergency stop are implemented. macOS mouse and keyboard control still requires a signed native host, Accessibility permission, and stronger passkey enforcement.
Visible desktop consent banner
required
Phone and desktop emergency stop
required
MFA or passkey before active control
required
Device registry with revoke
required
Session audit trail
required
Allowlisted CLI commands only
required
No public owner credentials
required
No unattended control by default
required
Security review before screen input ships
required