You're wrong about the interaction model. When you install the client on your phone and pair it with a computer (via QR code) it generates a ssh key. You then n

You're wrong about the interaction model. When you install the client on your phone and pair it with a computer (via QR code) it generates a ssh key. You then need to import the public key into your github (or gitlab etc.) account same as you normally would. Once that's done on the client side there's a SSH plugin that is registered that intercepts the authentication request and pings the krypton server to sign your commit with the private key on your phone (the server relays the signing request to your phone via push notification). Assuming you approve everything on your phone the result is unwound back to your ssh client which finishes the handshake with the server and authorizes you based on the public key you had previously uploaded.