OptionalclassOptionalexternalOptionalfontOptionallayoutOptionalmodevoice-only (default) — the reader has only a picture / a voice call, so the
value crosses voice. paste-bind — a value was pasted and machine-compared,
and this ceremony only binds a cell or two to the live person (§15.6).
OptionalnoteOptionalonOptionalonThe typed event firehose (see events.ts). Notify-only: voice.start (past the §15.1 gate) and voice.complete only — there is deliberately NO voice.step, so the live authenticator-chosen cell order never leaves the endpoint.
OptionalonOptionalrngA [0,1) source standing in for the authenticator's live, unpredictable choice
of cells — the platform CSPRNG by default; a seeded source in tests. PROD GATE
(§5.4): compiled out of production via safeRng — a prod bundle always uses
the platform CSPRNG regardless of an injected rng, so a predictable live
order can't be shipped to defeat the ceremony's selection-unpredictability.
OptionalstyleOptionaltarget
When true, DON'T render our figure — the host draws it and overlays the ring itself (the comparator reuses its static figure). Reports the current cell via onStep as a text WalkStep so the host can ring it.