🏨 Demo App (untrusted · "hotel brand") — frames the room but is cross-origin, so it can't read a word of it
This app is the middle layer. It positions the room; it can't reach the vault API (SecurityError) or read the room's content. Try tapping ⋯ → Invite in the room — the consent appears in the vault's bar above, which this app can't cover.