diff --git a/NucleicRemote/NucleicRemote/Views/ApprovalCardView.swift b/NucleicRemote/NucleicRemote/Views/ApprovalCardView.swift
index 0926b72..8ef3b8f 100644
--- a/NucleicRemote/NucleicRemote/Views/ApprovalCardView.swift
+++ b/NucleicRemote/NucleicRemote/Views/ApprovalCardView.swift
@@ -1,23 +1,17 @@
 import SwiftUI
-import LocalAuthentication
 import NucleicProtocol
 
 /// The defining interaction (UX_IOS §5): answer an approval. High-risk (destructive/network)
-/// requires Face ID/Touch ID before Allow is enabled — deliberate friction mirroring the Mac.
-/// First-responder-wins: if the Mac (or another phone) answers first, the host's
-/// `approvalResolved` removes this card.
+/// still routes through the app (never the notification banner) so approval is a deliberate,
+/// in-context tap. First-responder-wins: if the Mac (or another phone) answers first, the
+/// host's `approvalResolved` removes this card.
 struct ApprovalCardView: View {
     @EnvironmentObject var store: RemoteStore
     let approval: ApprovalRequest
 
-    @State private var biometricPassed = false
-    @State private var authError: String?
     @State private var showAlwaysMenu = false
 
-    private var requiresBiometric: Bool { approval.risk.isHigh }
-    private var allowEnabled: Bool {
-        store.connectivity.isLive && (!requiresBiometric || biometricPassed)
-    }
+    private var allowEnabled: Bool { store.connectivity.isLive }
 
     var body: some View {
         VStack(alignment: .leading, spacing: 10) {