Persistent Private Vault will be enabled later with server storage. API keys are never written into index.html.
Cross-device device registry, revoke-lost-device and Cancel Access for All Devices remain locked until persistent AUTH_KV/server storage is connected.
Tone, pitch and mood are never required for Founder commands. Suspicious voice/prosody alone does not prove identity.
Trusted-family slots and one-time server bridge codes are preserved as a locked architecture module. They do not receive Founder Vault authority. Server pairing becomes available after persistent storage is connected.
This pre-storage build keeps the 6-digit local PIN only as same-browser recovery. One-time recovery codes, new-phone enrolment, revoke-lost-device and global reset require the persistent Founder credential store.
Gemini is the conversation brain. ElevenLabs remains the speaking voice when VOICE is ON. Provider secrets are never hard-coded into index.html.
“দরজা খোল”, “দরজা খুল”, “পঞ্জিকা খোল”, “পঞ্জিকা দেখাও” → READ ONLY Founder Dashboard. Tone, mood, pitch or speed is not required. Voice command never grants edit authority.