clipsync/docs/adr/0004-key-mismatch-repair.md

Pinned-key mismatch forces a full re-pair

If a peer reconnects with a static key different from the pinned one, the session is rejected and the peer is treated as unpaired; a fresh handshake plus SAS verification is required before the pinned key is updated. Silently accepting a changed key would void the entire purpose of SAS verification (a LAN MITM who knows the peer's device ID could swap the key). Reinstalling an app therefore means a new identity and a new pairing.