This host (approval.8825.systems) is the canonical owner-presence approval origin for the 8825 system.
It is intentionally non-authoritative: this surface serves bootstrap presence only. It mints nothing, approves nothing, and holds no credentials.