ANKH Key
Security boundary.
The hardware product is designed to strengthen authentication while keeping the ANKH account, policy and federation model singular.
No parallel identity store
ANKH Key must not become a second user database or a site-specific credential silo.
No fallback downgrade
Recovery and replacement must not silently reduce a strong hardware-backed login to a weak universal fallback.
Claims require evidence
Hardware security, attestation and certification claims are withheld until verified by the appropriate testing and release evidence.