Overview

Push Subscription

Per-user/organisation Web Push subscription (F3.PWA.01). Reuses the F3.CHATOPS.01 event catalog for push payloads. p256dh_key and auth_key are AES-256-GCM encrypted at rest (same scheme as BYOC cloud-credential / notification-channel) and are never returned by the API — only a masked ‘is_configured’ indicator.