Device trust
Pair this device
Run agentd pair on the dev machine to get a single-use token + QR, then scan or paste it here.
Pairing token
Trust this browser
Tokens are single-use. Device tokens can be revoked below.
plaintext pairing payloads are sealed with AES-256-GCM after pairing (ADR-014).