alice⇄bob: live (public iroh relay) · tablet: your bucket only · bob can also try the bucket — revocation shows the pull tier · all E2E-encrypted · one device: the same engine on its own page, pairing across two browser tabs

Alice — laptop wire hub + bucket owner

…

Bob collaborator, live relay

…

Alice — tablet no connections, your bucket only

…
Storage the visor owns this frame; the provider's config panel below is a sandboxed component with its own grants. Configuration happens here; connecting happens only above the bar
Sign-in opens a browser window showing the provider's address. Secrets are never typed on this page, and nothing here connects anything: Save stores this provider's configuration and slides back. Connecting to it is a separate act, made above the coloured bar — in the Storage picker, which is drawn in pixels no page can imitate.