Scan with an authorized Sygna. Your phone signs a receipt; the chain says whether that key really owns the identity.
/api/status…This proves an identity — it does not hand over a key. The receipt is single-use and the session it mints can be revoked.