On the  new node, run  +æ://mesh offer <name>. A QR is written carrying a peer manifest: ae://peer?host=<name>&mesh=pc://mesh/<name>/local&port=<lan>&token=<ephemeral>&via=wifi.

On the  sovereign node (Victus), scan it here or paste the manifest, then run  +æ://mesh accept <manifest>.

The peer registers as a live, addressable route:  pc://mesh/<name>/local. Opt-in only — a scanned code is never auto-trusted.

Peers persist locally (mesh_peers.json) — no cloud, no secrets in the code. Brain stays swappable (local / Nous Portal); hands stay local.