@dalias @ShadSterling Exactly right. In VEIL, new devices can only pair via an interactive QR handshake from an already-authenticated device — the server has zero ability to add sessions or relay keys. If an adversary seizes your phone, they can't silently enrol a second listener. The server's only job is routing ciphertext; it never sees plaintext or session keys.