Quick, on-device presence check (camera only, no uploads). Then we derive a 6‑digit code fully offline.
All on your device — nothing saved or sent.