baron-safe-app/docs/bridge-policy.md

WebView-Native Bridge Policy

Allowed Commands

Command	Description
getDeviceInfo	Return device id, platform, app version
registerPushToken	Register current push token
openBiometricPrompt	Run biometric or device PIN prompt
blockSession	Block a session after native verification
blockLinkedApp	Block a linked RP after native verification
openSettings	Open native app settings

Rules

• Do not pass private keys to WebView.
• Do not store long-lived refresh tokens in WebView storage.
• Validate origin and session before processing bridge commands.
• Native layer must verify sensitive commands before calling backend APIs.