• A passkey can now be answered from the Android app as well as the console. The station accepts an assertion that names the app's own signing certificate as its origin, when that certificate is the published app's or one listed under Settings, Sign-in, "Android builds that may use passkeys", and binds it to the station's public https address.
• Signing in to the console with a passkey, and answering a second step with one, now work. The console sent the signed passkey form-encoded, which flattened it to nothing the station could read, so both were refused.