Identity Is Resolved, Not Claimed
The connecting peer's name comes from the local mesh daemon looking at the source address — the encrypted session the daemon already has, not a string the client typed. A peer the daemon cannot name is refused before any engine contact. That is the difference between a login form and a whois.
Above the mesh sits a plain JSON allowlist the operator edits. A row exists only after approval. Deleting the row revokes. When the gateway has no terminal, interactive approval does not run, so the list grows only by the operator's hand. A standing service that popped a ghost prompt would be inventing a yes.
Verbs, Then One Writer
Authorization is verb filtering, default deny. Spectate is a closed read-only set. Every other verb, including verbs that do not exist yet, needs mutate. A mutating frame attaches one surface to one session. A second surface is told the session is attached elsewhere. Reads may still project. Two writers would be two loops wearing one ULID. A spectator may refresh a fold. A second mutator may not 'help' by sending the same prompt from another glass.