Relay uses the browser bookmark permission to read and apply changes locally.
The security boundary
WebAuthn PRF output opens a credential-bound recovery envelope on the client. Relay never receives that output or the readable recovery key.
The backend moves encrypted payloads, checks ownership, and enforces plan limits.
Pro Time Machine points are full encrypted vault snapshots, not readable bookmark copies.