Connects a session from a CUBE token a door already minted, without prompting.
A login front on a shared host exchanges the operator's password for a
token itself and hands the token to the session it spawns; the session
never sees a password. The token is proved against the server before the
context is written, so a refusal changes nothing on disk. On acceptance
the context is set the way a credentialed boot sets it: the identity, and
no feed or plugin — the working directory is the identity's own and is
not touched, so a session that was evicted comes back where it was.
Connects a session from a CUBE token a door already minted, without prompting.
A login front on a shared host exchanges the operator's password for a token itself and hands the token to the session it spawns; the session never sees a password. The token is proved against the server before the context is written, so a refusal changes nothing on disk. On acceptance the context is set the way a credentialed boot sets it: the identity, and no feed or plugin — the working directory is the identity's own and is not touched, so a session that was evicted comes back where it was.