Self-sovereign identity
The deed is a key, not an account.
ECDSA P-256 for signature. ECDH P-256 for sealed sharing. did:aethelos lives on this device. Platforms do not co-sign.
Mint
One alias. A keypair is generated in the browser. Private material never leaves the vault. You may later arm a bio lock so even this device cannot open without the body.