← PULSEQR TRANSPORT · V1

One fresh exchange.

Offline phone → executor. A scan carries a signed pulse. It never creates an action permit, proves distance, or proves biological presence.

StartingSILENT

No accepted lease

Opening local storage…

1. Compare and provision

Your key fingerprint

Your public setup data Other device’s public setup data

Compare these fingerprints directly with the other device’s own display over a trusted channel. QR images cannot establish trust.

No setup data inspected

I compared the key fingerprints on both devices. Provisioned public ticket and policy

Test profile: PULSE ONLY. No real money or provider. Tickets and counters stay in this browser. Private keys never enter QR codes.

2. Exchange within five seconds

Keep both pages visible. Point one camera at the other screen. Each executor challenge starts a new session and replaces the previous lease. There is no timing grace.

Or scan a QR image locally Scanned payload / exact canonical text Outgoing canonical payload

Images stay local. A copied, still-fresh image can win the first delivery; it cannot be distinguished from the original. Repeat and expired deliveries refuse. Relays remain possible.

3. Close or revoke

Closing reception preserves only an already accepted lease until its original deadline. Stop clears the local gate immediately. A phone-side stop cannot notify an offline executor.

Signed HAP revoke bundle (local text transfer)

Revocation is acknowledged only on the executor after verification and durable storage. Large history bundles travel as text, not a truncated QR.