Your passkey stays on this device. Vindicara never receives your biometric. This signs a record of who authorized which agent, under which policy.
ready