Note 02
Read the tall screen, not the window.
Two pictures of the same request can exist at once. One is on the computer. One is on Quantumicy. Only one of them is drawn by the chip that holds the key.
Software on a computer paints its own windows. That is normal, and it is also the reason a hardware wallet has a screen of its own. If the only place you look is a window the computer controls, you are trusting that computer to describe the request honestly. Quantumicy asks you to look at a panel the computer does not control.
When a request arrives over USB-C, the chip lays out the details on the tall glass: the amount, the destination, and a warning if the chip wants one. The yellow ring does nothing useful until you have read those lines. If a digit is wrong, or a destination is not the one you meant, the top or bottom button dismisses the screen. The signature is never produced.
The same rule covers the home view. What you see when the slab is simply on is still drawn by the chip. It is there so you can look at the device itself, in your hand, rather than at a dashboard in a browser.
The glass is not a general-purpose display. It does not browse. It does not open mail. It shows the chip’s own prompts, the PIN entry, the one-time phrase, and the request waiting for the middle button. That narrow job is the point. A screen with many jobs is easier to confuse.
The security model puts this next to the button and the PIN. The chip note covers where the key sits while the glass is busy.