The browser padlock is 100% genuine on chronos-orbita1.com, but the security key holds a credential only for chronos.orbital and signs nothing there. Out-of-band verification requires calling the requester back using a phone number stored in Meridian’s verified directory.