The replica key is server-held
The user’s web decision of 2026-10-07 (PLAN.md, “USER DECISIONS (2026-10-07, web)”): the replica key is held by the server per user and delivered at login. It is never stored in the browser.
The user’s web decision of 2026-10-07 (PLAN.md, “USER DECISIONS (2026-10-07, web)”): the replica key is held by the server per user and delivered at login. It is never stored in the browser.