The Sponsor
You pick the rule. You don't get the key.
Both people Add The Sponsor in Grok Bot. One types PAIR. The other types SPONSOR and the code. After ARM, only the friend can APPROVE an unlock this turn.
It locks that bot and that bot's computer. Not your phone.
No hidden history. No keylog.