01
Your face on the confirm step
Your Kalshi key already lives in your browser in a form nothing can copy back out — not a script, not us, not you. On iPhone the intent is the Secure Enclave, with your face on the confirm step rather than a tab someone left open.