If all devices are lost:
Guardians or recovery keys approve a recovery flow.
A new control key is added.
State is recomputed.
Old keys are revoked in the policies tree.
The identity remains intact.
Only the
state
moves forward.