Trust needs a place you can open.

The customer trust centre gathers pending approvals, active and stalled work, recent receipts, memories with provenance and connected Google or Microsoft sources in one signed view.

It does not build a second trust database. Each section reads or links to the same record SA‑NT already uses to work, remember and prove an action.

Capture can be paused immediately. Restarting requires a deliberate confirmation. A connected account can be disconnected without affecting another account family, and the change is written to the action ledger.

Export, one-use downloads, remembered-content erasure, account deletion, webhook changes and lifting lockdown now cross the same passkey boundary. The approval is bound to the exact proposal, and deletion is not reported complete while a provider exception or an offline device still owes an acknowledgement.

The trust centre is available in the private pilot. Passkey enrollment and recovery are implemented for the next pilot release and remain in development until live device, browser and rights-flow verification is complete. Links expire, are scoped to this page and do not reveal provider credentials, private media or internal operating controls.

Voice recognition is not an authority. The biometric or device PIN used by a passkey remains on the person's device; SA‑NT stores the public credential and a bounded receipt, not a voiceprint. The page does not widen what SA‑NT may collect, retain or do.