@accountless.eth
“proposes a Separation of Concerns: offload sensitive operations (seed storage and signing) to an isolated Signer App, while Client Apps request public keys and signatures via a narrow, auditable protocol.”
https://github.com/Open-Store-Foundation/app/blob/main/lib/gcip/CAIP.md