The device-authorization half of the state machine (RFC 8628 shape). A poller that cannot hold a password starts a grant, shows a human a short code and the host's approval page, and polls with its own high-entropy device code until a signed-in subject approves. Fifteen minutes to live, single use, one poll per interval.