Coming Back Is Not Still Holding
After a network loss, a lock, or a suspension, you reopen as a spectator. You do not reopen as the controller you were. The world may have moved: the Mac may have taken the lease back, another phone may have taken it, the operator at the glass may have typed, the child may have exited. A reconnect that replays a control claim is a claim in the dark. Dark claims are how you type into a conversation that is no longer yours, or into a process that is no longer there.
The attachment you lost was one identity. The attachment you make now is another. Track 2 already said a pocket hangup closes the attachment, not the session. This lesson names the posture of the new attachment: spectator, always, until Take Control is pressed again on purpose. Local flags that said isController die with the old attachment. They are not cargo.
Match the Incarnation, Match the Session
Reconnect aims at the original daemon incarnation and the original session id. If the daemon has restarted, process identity is gone — Track 2's rematerialize, not this attach. If the session id is gone, you are not "back." You are looking at a different fire that happens to have a similar title. Pretending they are the same is resurrection of a PID wearing a reconnect spinner. The honest UI says the session is not here, offers the declaration if one exists, and does not grant a lease onto a lookalike.
Incarnation is the boot-UUID idea applied to the daemon's life, not only the machine's. Same machine, new daemon process, old leases are paper. Same daemon process, same session id, you may attach as spectator and see the live jobs. That pair — incarnation plus session — is the only honest address. Titles are not addresses. PIDs are not addresses. "The pane that was on the left" is not an address after a reboot.
Never Replay the Grant
A saved Take Control is not a ticket that still works. Replaying it would skip the clerk. The clerk has to be asked again, in the present, when you can see who holds input now. If nobody does, you still start as spectator; then you may take. If somebody does, you watch, and you decide whether to steal explicitly. Steal is Take Control while another holder exists — same serialized handoff, old writer read-only, process alive. It is allowed because it is visible. It is not allowed as a reconnect side effect.
This is the same honesty as a stale Pippa snapshot. The grant belonged to a moment. The moment passed. Inserting a stale grant into a live clerk is splicing a suffix onto the wrong prefix. Come back, look, choose. The pocket is allowed to be inconvenient here. Inconvenience is cheaper than a silent steal into a live Anvil seat.