Boundary
Mint client tokens server-side with only required write capabilities.
MOBILE
Expo / React Native
Collect mobile feedback with short-lived application-bound credentials instead of embedding provider or control-plane secrets in the app.
EXECUTION BOUNDARY
The mobile app may submit bounded feedback or teaching evidence. Server-side infrastructure still mints credentials and owns provider/control-plane authority.
IDENTITY PRESERVED
Keep the behavior identity attached to the host framework.
- application-bound client token
- traceId
- feedback/teach capability
- project Teach Inbox lineage
SUPPORTED OPERATIONS
Use Vira where the control boundary actually belongs.
- 01
submit reject/edit/teach feedback against a trace
- 02
carry mobile evidence into the same Teach Inbox
- 03
use short-lived limited tokens
SECURITY BOUNDARY
Integration does not equal authority.
Boundary
Keep token expiry short and application-bound.
LIMITATIONS
State what the adapter does not control.
- Do not bundle provider keys.
- Do not bundle broad control-plane keys.
- Mobile teaching evidence does not mutate active behavior directly.