Presents window.nostr (NIP-07) to any Nostr web client and forwards every call to the Nostr Onchain Pocket Signer over its USB-C link. Plugged in = you can sign. Unplugged = you can't. The simplest security model there is.