%20scale(.8)'%3e%3cpath%20d='M116.770%2049.147A48%2048%200%201%200%20116.770%20110.853'%20fill='none'%20stroke='%2316263D'%20stroke-width='27.5'%20stroke-linecap='round'/%3e%3cpath%20d='M138.5%2080%20A10.5%2010.5%200%201%200%20117.5%2080%20A10.5%2010.5%200%201%200%20138.5%2080%20Z'%20fill='%23F06D5E'/%3e%3c/g%3e%3cg%20fill='%233D8B83'%20stroke='%233D8B83'%20stroke-linecap='round'%20stroke-linejoin='round'%3e%3cpath%20d='M445.5%20132%20A7.5%207.5%200%201%200%20430.5%20132%20A7.5%207.5%200%201%200%20445.5%20132%20Z'%20stroke='none'/%3e%3cpath%20d='M511.5%20110A25.5%2025.5%200%201%201%20486%2084.5A25.5%2025.5%200%200%201%20511.5%20110V135.5'%20fill='none'%20stroke-width='14'/%3e%3cpath%20d='M552%2091V135.5'%20fill='none'%20stroke-width='14'/%3e%3cpath%20d='M559.5%2068%20A7.5%207.5%200%201%200%20544.5%2068%20A7.5%207.5%200%201%200%20559.5%2068%20Z'%20stroke='none'/%3e%3c/g%3e%3c/svg%3e)
6. Mobile: An Optional Personal Access Point
Mobile provides the richest settings and approval experience but is not mandatory. Identity and consent belong to the user, not a device, and each access point temporarily uses only needed authority.
6.1 Core functions
- Voice, text, photo, and button requests
- Local schedule, preference, and accessibility profile
- Biometric approval for consequential action
- Service-account and permission management
- One-time authority for secure execution spaces and kiosks
- Progress, result, payment, and helper controls
- Data access, deletion, and consent withdrawal
6.2 Work mobile cannot safely complete
Long forms, multi-window bookings, desktop-only systems, hours-long waiting, and large document or model workloads can move to an IROA secure execution space. The approval channel creates a bounded authority containing purpose, sites, expiry, usable information, and forbidden actions.
6.3 Users without mobile
Options include registered phone and voice verification, in-person institutional verification when required, passkeys or one-time QR/cards on watch, kiosk, or companion, spoken request summaries, dual confirmation for payment or contract, and outcomes by call, voice device, paper receipt, or approved helper.
6.4 Guardian mode
Guardian mode is not full account access. Permissions can allow schedule viewing while requiring renewed user approval for a change, or require dual confirmation for payment. Health fields are shared individually, and emergency escalation can be time-limited.