If the object goes missing.

Reporting the object lost moves it into a distinct lifecycle state. Ordinary use and outward authority are revoked, while one narrow route remains open for status, chirp and owner-authenticated recovery.

The encrypted material on the object stays intact. If it turns up in a coat pocket, recovery is a state change—not a restore from an automatic deletion.

Lost Mode never carries a wipe instruction. A unit confirmed stolen may have its server-side key envelopes shredded through a separate authorised operation with a recorded reason.

That step is irreversible and cannot be inferred from time, coverage or Lost Mode. Service-intake wipe and account erasure keep their own authority and receipts.

SAINT does not turn the object into a location beacon. Lost mode is about protecting the person and making recovery explicit, not creating a permanent map of where they have been.

The device work described here is part of the active system programme. It is not a claim that production hardware has shipped.