The server owns the escalation timer. This camera sends a heartbeat every 3s. If the camera is switched off or the tab is closed during an incident, the server flags TAMPER (camera cut / wires cut) — open the Child App to watch the live incident. Forced-entry is a manual test trigger (real hardware = door/window sensor).