ZTRUST/2 / ZOWNER/1
ZTRUST/2 authenticates a paired phone and workstation using fresh nonces and P-256 signatures. On stock Android the transport is an ADB reverse tunnel, but transport is not the trust decision.
After authentication the phone polls. A paired host may request a bounded owner proof for an action/resource tuple. The phone requires the device to remain unlocked, validates the proof time window, accepts only owner.* / credential.* action namespaces, constructs the canonical domain-separated message itself and signs with Android Keystore.
Canonical owner proof transcript:
ZTRUST/2|OWNER_PROOF|host-fingerprint|phone-fingerprint|action-hex|resource-hex|nonce|issued|expiresThe proof format is ZOWNER/1. There is no raw SIGN(bytes) endpoint.
Device trust vs user presence (v0.2.2)
Section titled “Device trust vs user presence (v0.2.2)”After mutual authentication the phone keeps the ZTRUST session alive while the screen is locked. Heartbeats are POLL UNLOCKED or POLL LOCKED. Host-side device trust remains valid in both states. Owner-proof requests are denied with phone-locked while locked.