As a separate device, it should be offline always IMO, and perhaps the size of a passkey. Or one of those banking devices with a display that show an authenticated text saying what you are confirming.
....wow, that would be reinventing the existing model of the leading ID cards....
Crazy if you think about it :)