Replying to @Chronotope and @kickstand
One of the tricky bits is you need a messaging channel. Ideally you would get your origin-specific ID (eg. de4db33f) and you could push messages (sealed web bundles, so you can’t pixel them) to it. How the user receives that (email, push, voice, /dev/null…) would be their call.
♥ 1