# Pinned-key mismatch forces a full re-pair

If a peer reconnects with a static key different from the pinned one, the
session is rejected and the peer is treated as unpaired; a fresh handshake plus
SAS verification is required before the pinned key is updated. Silently
accepting a changed key would void the entire purpose of SAS verification (a
LAN MITM who knows the peer's device ID could swap the key). Reinstalling an
app therefore means a new identity and a new pairing.