Thin FastAPI layer over the identity flows and the sync engine: setup (returns the recovery phrase exactly once when this device mints the account key), restore, adopt, status, and run. Service errors surface as 400s with their message.