From 60cd3de192d2001c6e9a684e7a37b84d35cbf9e3 Mon Sep 17 00:00:00 2001
From: VasilevNStas <ctac@outlook.com>
Date: Sun, 28 Jun 2026 19:43:36 +0300
Subject: [PATCH] =?UTF-8?q?docs(auth):=20fix=20client=5Fid=20origin=20?=
 =?UTF-8?q?=E2=80=94=20client=20generates=20it,=20not=20Hub?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 auth.proto | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/auth.proto b/auth.proto
index 197b01d..1d49a21 100644
--- a/auth.proto
+++ b/auth.proto
@@ -10,8 +10,9 @@ package proto;
 // recovered identity to set up the tunnel session.
 message Auth {
   // Stable client identifier, exactly nine raw UTF-8 bytes; signed
-  // by the HMAC together with timestamp. Not a UUID — the Hub
-  // generates it once per installation.
+  // by the HMAC together with timestamp. Not a UUID — the client
+  // generates it once per installation using a cryptographically
+  // secure RNG and persists it across launches.
   bytes client_id = 1;
 
   // Minutes since the project epoch (2024-01-01 UTC), used as a