The Engine Stays Portless
firebrand gateway is the one listening program in the repository. The engine that authors still opens no port. The gateway binds this host's mesh address or loopback. A bind to every interface, a LAN address, or a public address is refused in structure. There is no flag that widens it. Starting the gateway is an operator choice. Not starting it is the cleanroom default.
Inside, supervision copies the Mac host: a control child for catalog and sessionless reads, one engine child per live session, the same frame cap, the same teardown when the parent dies. A websocket on the outside is translated to the same stdio the Mac already speaks. The loop does not learn that it is remote.
Start Is a Recorded Act
Gateway start and stop are lines in the gateway log. Session attach, claim, refuse, child spawn and exit are lines. The session notebooks remain the lab notebooks. The gateway log is the door log. Mixing them would make resume feed a model a firewall. The model does not need to know that a phone is watching. It needs the same fold the terminal already uses.