Lisgen

01

Your identity is derived, never assigned

The same passkey always produces the same account. We store no identifier that could be reversed to you.

Account

acct_2a5854b0b…

Derived by SHA-256 from your passkey public key. If our database were wiped and rebuilt, your passkey would derive the same account again — the identity lives in your hardware, not our storage.

Lifecycle

Tracking

  • 01

    enrolled

  • 02

    sequenced

  • 03

    baselining

  • 04

    tracking

02

Devices3

Each bound by a signature over a challenge that commits to that device's own key. A signature cannot be lifted onto another device.

A first device can be bound alone. Requiring two would deadlock anyone whose only key is a browser passkey — a failure we have seen ship elsewhere.

04

What leaves your device

Four numbers, carrying no identity.
mu
cohort mean of true per-person means
tau²
between-person variance
n_people
how many contributed
total_obs
how many observations in total

That is the entire cohort payload. No raw observation and no identifier crosses the boundary — which is why borrowing sharpens your threshold without pooling anyone's data.