Module pairing 

Pairing proves each actual receiver key, never independent account authority.

Constants

BROWSER_COMPLETION_FORMAT

INITIATION_FORMAT

MAX_PAIRING_SECONDS

Functions

initiation_bytes

Normative signed format: ascending protobuf tags, preserving oneof presence. Prost emits a oneof at its declaration position whereas protobuf-es emits tag order; ordinary RPC bodies need not agree, but signed records must.

sign_browser_completion

sign_browser_initiation

Browser receivers retain only a credential key, with no fabricated Iroh endpoint.

sign_initiation

verify_browser_completion

Verify only subject possession over the exact stored approval. The host must separately reverify the private derived Biscuit, account, revocations and expiry. This creates neither an endpoint attachment nor an independent mint issuer.

verify_initiation

A fresh exact RPC proof and host-side nonce admission remain mandatory.