Your account.

# 1. On the DEVICE: the SDK creates an Ed25519 key pair and keeps the private key.
#    To try the API by hand, make a test device key:
openssl genpkey -algorithm ed25519 -out device.pem
DEVICE_PUB=$(openssl pkey -in device.pem -pubout -outform DER | tail -c 32 | xxd -p -c 64)

# 2. On YOUR backend: exchange the secret API key for a session token bound to that device
curl https://haptic-api.skyvale.org/v1/sessions \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{\"device_pub_hex\":\"$DEVICE_PUB\",\"user_id\":\"user-123-pseudonymous\",\"scopes\":[\"navigate\"],\"ttl_seconds\":900}"
# → {"session_id":"…","token":"…","exp_unix":…,"arm":"rules-v1",…}
#   Hand ONLY the token to the device. The edge accepts telemetry only when it is
#   signed by the device key the token is bound to.

# Rotate: issues a new key and revokes the current one
curl -X POST https://haptic.skyvale.org/api/keys/rotate \
  -H "Authorization: Bearer YOUR_API_KEY"