# Architecture

## Principle

Baron Safe is developed as a hybrid app. The WebView layer presents session, linked app, QR, and portal-style screens. Native or Flutter plugin layers handle sensitive capabilities.

## Layers

| Layer | Responsibility |
| --- | --- |
| WebView | Display session history, linked apps, details, and user actions |
| Native/Plugin | Push, biometric prompt, secure storage, future key signing |
| Backend | Device registration, push trigger, session query, session blocking, audit logs |

## Default UX

The initial model is post-login confirmation and blocking:

`phone number login -> login allowed -> Baron Safe notification -> user confirmation -> block if suspicious`