# op-witness-phone

## Purpose

Witness device for verification (alerts, confirmations, second factors).

## Trust boundary

- The phone is a witness, not a workstation.
- Prefer read-only access; no critical admin actions originate here.

## References

- Doctrine: `00-doctrine/operator-charter.md`
- Lease: `20-identity/leases/op-witness-phone.md`