tdc114plus/docs/references/baron-safe-policies/architecture.md

Architecture

Principle

Baron Safe is developed as a hybrid app. The WebView layer presents session, linked app, QR, and portal-style screens. Native or Flutter plugin layers handle sensitive capabilities.

Layers

Layer	Responsibility
WebView	Display session history, linked apps, details, and user actions
Native/Plugin	Push, biometric prompt, secure storage, future key signing
Backend	Device registration, push trigger, session query, session blocking, audit logs

Default UX

The initial model is post-login confirmation and blocking:

phone number login -> login allowed -> Baron Safe notification -> user confirmation -> block if suspicious