{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[5350388a] Add pool-scoped voting: /vote?pool=<parent> picks pairs from children.\n\n- /vote now accepts an optional `pool` param (parent item path). When\n  provided without left/right, it picks the first unvoted pair from the\n  pool's children. When provided alongside left/right, it constrains\n  \"next pair\" navigation to siblings within the pool.\n- \"vote on children\" button appears on item pages with ≥2 children,\n  linking to /vote?pool=<item>.\n- Pool is threaded through VoteComparePost → success JS so in-page\n  morph after voting keeps the pool context for next-pair navigation.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\nSide A — unified diff (full patch):\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex 5faa642451d69555cb391974beb0ad22c9355c8c..b79efdb4d52bd445a67f38cbfd61d3507d2b3014 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -193,6 +193,7 @@ async fn dispatch_ui_action(\n             ratio_right,\n             explanation,\n             next,\n+            pool,\n             form_action,\n         } => {\n             if form_action != \"/ui\" {\n@@ -239,6 +240,9 @@ async fn dispatch_ui_action(\n                         .into_response();\n                 }\n             };\n+            let pool_id = pool.as_deref().and_then(|p| {\n+                crate::path_types::ItemId::parse(p.trim()).map(|i| i.normalized_storage())\n+            });\n             let mut rl = ratio_left.trim().parse::<i32>().unwrap_or(0).max(0);\n             let mut rr = ratio_right.trim().parse::<i32>().unwrap_or(0).max(0);\n             if rl == 0 && rr == 0 {\n@@ -294,6 +298,7 @@ async fn dispatch_ui_action(\n                         &thread_tag,\n                         &left_id,\n                         &right_id,\n+                        pool_id.as_ref(),\n                         pid.as_str(),\n                         post_index,\n                     )\ndiff --git a/server/src/html/garden/pin.rs b/server/src/html/garden/pin.rs\nindex 5865cfdbc06aeb6555c97380e25591fae6b3d125..1820d7fe7ee167ecbf5ad5124f23b2ab92ffb01f 100644\n--- a/server/src/html/garden/pin.rs\n+++ b/server/src/html/garden/pin.rs\n@@ -79,7 +79,7 @@ pub(super) fn ont_pin_vote_controls(\n                         }\n                     }\n                 } @else {\n-                    a class=\"ont-vote-compare-btn\" href=(vote_compare_href(nav, pi, &current, None)) title=\"Compare and vote\" {\n+                    a class=\"ont-vote-compare-btn\" href=(vote_compare_href(nav, pi, &current, None, None)) title=\"Compare and vote\" {\n                         span class=\"ont-vote-glyph\" aria-hidden=\"true\" { \"⚖\" }\n                         span { \"vote\" }\n                     }\n@@ -121,7 +121,7 @@ pub(super) fn child_row_pin_or_vote(\n                         if nv == 1 { \"\" } else { \"s\" },\n                     );\n                     @let aria = format!(\"Vote; {} pairwise {}\", nv, if nv == 1 { \"vote\" } else { \"votes\" });\n-                    a class=\"ont-garden-vote-ico\" href=(vote_compare_href(nav, pi, row_item, None)) title=(tip) aria-label=(aria) {\n+                    a class=\"ont-garden-vote-ico\" href=(vote_compare_href(nav, pi, row_item, None, None)) title=(tip) aria-label=(aria) {\n                         span class=\"ont-garden-vote-glyph\" aria-hidden=\"true\" { \"⚖\" }\n                         span class=\"ont-garden-vote-count\" { (format!(\"{}\", nv)) }\n                     }\ndiff --git a/server/src/html/garden/render.rs b/server/src/html/garden/render.rs\nindex 5c3986ca36902f6c9019a4b5590f0b3b9d2cb4ff..bd8cbce059ee789de6e8dc9b6f69f54beee2f994 100644\n--- a/server/src/html/garden/render.rs\n+++ b/server/src/html/garden/render.rs\n@@ -29,6 +29,7 @@ use super::{\n     item::{child_depth_from_uri, item_code_label, item_display_path, item_href},\n     item_page::{build_item_page_view_model, sibling_nav_markup},\n     pin::{child_row_pin_or_vote, ont_pin_vote_controls, pinned_item_from_jar},\n+    vote::vote_pool_href,\n };\n \n pub(super) async fn render_scope_view(\n@@ -186,12 +187,21 @@ pub(super) async fn render_scope_view(\n             }\n \n             section class=\"ont-tab-panel ont-tab-panel-children\" {\n+                @let total_children = model.child_rankings.component_rankings\n+                    .iter().map(|c| c.ranked.len()).sum::<usize>()\n+                    + model.child_rankings.unranked_items.len();\n                 h3 {\n                     \"ranked child groups\"\n                     @if model.child_depth > 1 {\n                         \" \"\n                         span class=\"muted\" { (format!(\"(depth {})\", model.child_depth)) }\n                     }\n+                    @if total_children >= 2 {\n+                        \" \"\n+                        a class=\"ont-vote-children-btn\" href=(vote_pool_href(&nav, &model.item)) {\n+                            \"vote on children\"\n+                        }\n+                    }\n                 }\n                 @if model.child_rankings.component_rankings.is_empty() {\n                     p class=\"muted\" { \"no voted pairs yet in this scope\" }\ndiff --git a/server/src/html/garden/tests.rs b/server/src/html/garden/tests.rs\nindex 6900a6795bcde866a176722149d6378e5127b4c3..c2036fca7752aef63d260e36cfe9649f63b5c550 100644\n--- a/server/src/html/garden/tests.rs\n+++ b/server/src/html/garden/tests.rs\n@@ -105,7 +105,7 @@ fn suggest_next_vote_pair_prefers_unvoted_sibling_pair() {\n     let content = content_for_garden_view(&reduced, &ScopeId::Public);\n     let a = ItemId::parse(\"~/topic/a\").unwrap().normalized_storage();\n     let b = ItemId::parse(\"~/topic/b\").unwrap().normalized_storage();\n-    let next = suggest_next_vote_pair(content, &a, &b).expect(\"next sibling pair\");\n+    let next = suggest_next_vote_pair(content, &a, &b, None).expect(\"next sibling pair\");\n     assert_ne!(\n         canonical_edge_items(&next.0, &next.1),\n         canonical_edge_items(&a, &b)\ndiff --git a/server/src/html/garden/vote.rs b/server/src/html/garden/vote.rs\nindex 1d7fc8aa7436bfa9c1186dfd940a8d751ab7e088..2682cfcbd2f834b56459a02831aa225cffe67c58 100644\n--- a/server/src/html/garden/vote.rs\n+++ b/server/src/html/garden/vote.rs\n@@ -211,14 +211,15 @@ pub(crate) async fn vote_compare_post_success_js(\n     _thread_tag: &str,\n     left: &ItemId,\n     right: &ItemId,\n+    pool: Option<&ItemId>,\n     _post_id: &str,\n     _post_idx: Option<usize>,\n ) -> String {\n     let reduced = state.reduced.read().await;\n     let content = content_for_garden_view(&reduced, &nav.scope());\n     let edge_history = vote_edge_history_markup(content, left, right);\n-    let next_pair = suggest_next_vote_pair(content, left, right);\n-    let nav_markup = vote_compare_nav_markup(nav, next_pair.as_ref());\n+    let next_pair = suggest_next_vote_pair(content, left, right, pool);\n+    let nav_markup = vote_compare_nav_markup(nav, next_pair.as_ref(), pool);\n     drop(reduced);\n     JsBuilder::new()\n         .morph_inner_selector(\"#vote-edge-history-region\", edge_history)\n@@ -231,27 +232,39 @@ pub(super) fn vote_compare_href(\n     left: &ItemId,\n     right: &ItemId,\n     thread_override: Option<&str>,\n+    pool: Option<&ItemId>,\n ) -> String {\n     let left_q = urlencoding::encode(left.as_str());\n     let right_q = urlencoding::encode(right.as_str());\n-    let base = format!(\n+    let mut base = format!(\n         \"{}/vote?left={}&right={}\",\n         nav.room_path_prefix_for_vote_compare(),\n         left_q,\n         right_q\n     );\n     if let Some(t) = thread_override.filter(|s| !s.is_empty()) {\n-        format!(\"{}&thread={}\", base, urlencoding::encode(t))\n-    } else {\n-        base\n+        base = format!(\"{}&thread={}\", base, urlencoding::encode(t));\n+    }\n+    if let Some(p) = pool {\n+        base = format!(\"{}&pool={}\", base, urlencoding::encode(p.as_str()));\n     }\n+    base\n+}\n+\n+pub(super) fn vote_pool_href(nav: &ThreadNav, pool_item_str: &str) -> String {\n+    format!(\n+        \"{}/vote?pool={}\",\n+        nav.room_path_prefix_for_vote_compare(),\n+        urlencoding::encode(pool_item_str)\n+    )\n }\n \n fn vote_compare_nav_markup(\n     nav: &ThreadNav,\n     next_pair: Option<&(ItemId, ItemId)>,\n+    pool: Option<&ItemId>,\n ) -> maud::Markup {\n-    let next_pair_href = next_pair.map(|(nl, nr)| vote_compare_href(nav, nl, nr, None));\n+    let next_pair_href = next_pair.map(|(nl, nr)| vote_compare_href(nav, nl, nr, None, pool));\n     html! {\n         div class=\"vote-compare-nav\" {\n             @if let Some(href) = &next_pair_href {\n@@ -267,8 +280,15 @@ pub(super) fn suggest_next_vote_pair(\n     content: &ContentState,\n     current_left: &ItemId,\n     current_right: &ItemId,\n+    pool_parent: Option<&ItemId>,\n ) -> Option<(ItemId, ItemId)> {\n-    let pool: Vec<ItemId> = if current_left.parent().as_ref().map(|p| p.as_str())\n+    let pool: Vec<ItemId> = if let Some(parent) = pool_parent {\n+        content\n+            .item_children\n+            .get(parent)\n+            .map(|s| s.iter().cloned().collect())\n+            .unwrap_or_default()\n+    } else if current_left.parent().as_ref().map(|p| p.as_str())\n         == current_right.parent().as_ref().map(|p| p.as_str())\n     {\n         current_left\n@@ -322,10 +342,14 @@ pub(super) fn vote_compare_item_card(\n }\n #[derive(Debug, Deserialize)]\n pub struct VoteCompareQuery {\n-    pub left: String,\n-    pub right: String,\n+    #[serde(default)]\n+    pub left: Option<String>,\n+    #[serde(default)]\n+    pub right: Option<String>,\n     #[serde(default)]\n     pub thread: Option<String>,\n+    #[serde(default)]\n+    pub pool: Option<String>,\n }\n \n /// Public pairwise vote UI — `/vote?left=&right=&thread=`.\n@@ -376,17 +400,53 @@ async fn vote_compare_inner(\n     jar: CookieJar,\n     uri: Uri,\n ) -> axum::response::Response {\n-    let left = match ItemId::parse(q.left.trim()) {\n-        Some(i) => i.normalized_storage(),\n-        None => return (StatusCode::NOT_FOUND, \"bad left item\").into_response(),\n+    let pool_id: Option<ItemId> = match q.pool.as_deref() {\n+        Some(p) => match ItemId::parse(p.trim()) {\n+            Some(i) => Some(i.normalized_storage()),\n+            None => return (StatusCode::BAD_REQUEST, \"bad pool item\").into_response(),\n+        },\n+        None => None,\n     };\n-    let right = match ItemId::parse(q.right.trim()) {\n-        Some(i) => i.normalized_storage(),\n-        None => return (StatusCode::NOT_FOUND, \"bad right item\").into_response(),\n+\n+    let (left, right) = match (q.left.as_deref(), q.right.as_deref()) {\n+        (Some(l), Some(r)) => {\n+            let left = match ItemId::parse(l.trim()) {\n+                Some(i) => i.normalized_storage(),\n+                None => return (StatusCode::NOT_FOUND, \"bad left item\").into_response(),\n+            };\n+            let right = match ItemId::parse(r.trim()) {\n+                Some(i) => i.normalized_storage(),\n+                None => return (StatusCode::NOT_FOUND, \"bad right item\").into_response(),\n+            };\n+            if left == right {\n+                return (StatusCode::BAD_REQUEST, \"items must differ\").into_response();\n+            }\n+            (left, right)\n+        }\n+        (None, None) => {\n+            let Some(pool) = pool_id.as_ref() else {\n+                return (StatusCode::BAD_REQUEST, \"provide left+right or pool\").into_response();\n+            };\n+            let reduced = state.reduced.read().await;\n+            let content = content_for_garden_view(&reduced, &nav.scope());\n+            let children: Vec<ItemId> = content\n+                .item_children\n+                .get(pool)\n+                .map(|s| s.iter().cloned().collect())\n+                .unwrap_or_default();\n+            if children.len() < 2 {\n+                drop(reduced);\n+                return (StatusCode::BAD_REQUEST, \"pool has fewer than 2 children to compare\").into_response();\n+            }\n+            let pair = suggest_next_pair_in_pool(&content.ranking_group, &children, None);\n+            drop(reduced);\n+            match pair {\n+                Some(p) => p,\n+                None => return (StatusCode::BAD_REQUEST, \"no pairs available in pool\").into_response(),\n+            }\n+        }\n+        _ => return (StatusCode::BAD_REQUEST, \"provide both left and right, or just pool\").into_response(),\n     };\n-    if left == right {\n-        return (StatusCode::BAD_REQUEST, \"items must differ\").into_response();\n-    }\n \n     let reduced = state.reduced.read().await;\n     let content = content_for_garden_view(&reduced, &nav.scope());\n@@ -409,7 +469,7 @@ async fn vote_compare_inner(\n     let left_body = content.item_bodies.get(&left).cloned();\n     let right_body = content.item_bodies.get(&right).cloned();\n     let item_bodies_for_cards = content.item_bodies.clone();\n-    let next_pair = suggest_next_vote_pair(content, &left, &right);\n+    let next_pair = suggest_next_vote_pair(content, &left, &right, pool_id.as_ref());\n     drop(reduced);\n \n     let title = format!(\n@@ -432,6 +492,7 @@ async fn vote_compare_inner(\n         \"ratio_right\": {\"$form\": \"ratio_right\"},\n         \"explanation\": {\"$form\": \"explanation\"},\n         \"next\": next_path,\n+        \"pool\": pool_id.as_ref().map(|p| p.as_str()),\n         \"form_action\": \"/ui\",\n     }))\n     .expect(\"vote compare rpc json\");\n@@ -456,7 +517,7 @@ async fn vote_compare_inner(\n                 Some(&item_bodies_for_cards),\n             ))\n         }\n-        (vote_compare_nav_markup(&nav, next_pair.as_ref()))\n+        (vote_compare_nav_markup(&nav, next_pair.as_ref(), pool_id.as_ref()))\n         div id=\"vote-edge-history-region\" {\n             (edge_history)\n         }\ndiff --git a/server/src/html/ui_action.rs b/server/src/html/ui_action.rs\nindex dd5294202569454acf9f41b458718700bbf96f39..2589a2cc00bb7b18cd19ebcbb938083122d6921d 100644\n--- a/server/src/html/ui_action.rs\n+++ b/server/src/html/ui_action.rs\n@@ -50,6 +50,9 @@ pub enum HtmlUiAction {\n         explanation: String,\n         /// Same-origin path after successful post (JS redirect).\n         next: String,\n+        /// Pool parent item path, if the vote was initiated from a pool URL.\n+        #[serde(default)]\n+        pool: Option<String>,\n         #[serde(default = \"default_ui_form_action\")]\n         form_action: String,\n     },\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[b7626603] Remove browser sentinel delegates so multi-user votes work.\n\nShared WEB_BROWSER_AGENT bound on first vote and blocked every later human; browser posts now use no delegate, matching forum UI.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\nSide B — unified diff (full patch):\ndiff --git a/cli/src/main.rs b/cli/src/main.rs\nindex 70435b412188a151c5e89e842a5de57f7480ddf2..a4a22724fc9e27879951f520a9241d5832982a70 100644\n--- a/cli/src/main.rs\n+++ b/cli/src/main.rs\n@@ -1645,8 +1645,8 @@ async fn run() -> Result<()> {\n                     tokio::time::sleep(std::time::Duration::from_millis(poll_interval_ms)).await;\n                     let poll: PendingSessionPollResponse =\n                         expect_json(client.get(&poll_url).send().await?).await?;\n-                    if !poll.agent.trim().is_empty() {\n-                        agent_out = Some(poll.agent.clone());\n+                    if let Some(a) = poll.agent.as_deref().map(str::trim).filter(|s| !s.is_empty()) {\n+                        agent_out = Some(a.to_string());\n                     }\n                     if poll.complete {\n                         token_out = poll.token;\ndiff --git a/server/src/api/auth.rs b/server/src/api/auth.rs\nindex bfddcce4dc1a77571d297648dd840e6c5bc194f8..01c02f50c19bcd62c7f1717f9b927f203c3164d0 100644\n--- a/server/src/api/auth.rs\n+++ b/server/src/api/auth.rs\n@@ -29,12 +29,6 @@ use crate::{\n     write_cmd::WriteCmd,\n };\n \n-/// Delegate id for browser users who land via `/join/inv_…` (no CLI agent).\n-const INVITE_BROWSER_AGENT: &str = \"00000000-0000-0000-0000-000000000000:invite:web/join\";\n-\n-/// Agent id for `/login` browser OAuth (no CLI); must pass [`parse_agent`].\n-pub const WEB_BROWSER_AGENT: &str = \"00000000-0000-0000-0000-000000000001:social:web/browser\";\n-\n /// HttpOnly cookie storing the same `slug_*` bearer string the CLI uses.\n pub const SLUG_SESSION_COOKIE: &str = \"slug_session\";\n \n@@ -282,7 +276,7 @@ pub async fn get_join_invite(\n     let session = format!(\"p_{}\", uuid::Uuid::new_v4().simple());\n     let redirect_next = safe_local_redirect(q.next.as_deref().or(q.redirect.as_deref()));\n     let s = PendingSession {\n-        agent: INVITE_BROWSER_AGENT.to_string(),\n+        agent: None,\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\n@@ -549,7 +543,7 @@ pub async fn post_choose_username(\n     };\n \n     let sessions = pending_sessions(&state);\n-    let (provider, provider_id, agent) = {\n+    let (provider, provider_id) = {\n         let sessions_read = sessions.read().await;\n         let Some(s) = sessions_read.get(&form.session) else {\n             return api_error(StatusCode::NOT_FOUND, \"unknown session\", None).into_response();\n@@ -560,14 +554,9 @@ pub async fn post_choose_username(\n         let Some(provider_id) = s.provider_id.clone() else {\n             return js_form_error_fragment(&form.session, \"oauth not completed\").into_response();\n         };\n-        (provider, provider_id, s.agent.clone())\n+        (provider, provider_id)\n     };\n \n-    if let Err(msg) = parse_agent(&agent) {\n-        return js_form_error_fragment(&form.session, &format!(\"invalid agent format — {msg}\"))\n-            .into_response();\n-    }\n-\n     let redeem_invite = {\n         let sessions_read = sessions.read().await;\n         sessions_read\n@@ -637,7 +626,8 @@ pub async fn get_web_login(\n     let redirect_next = safe_local_redirect(q.next.as_deref().or(q.redirect.as_deref()))\n         .or_else(|| Some(\"/\".to_string()));\n     let s = PendingSession {\n-        agent: WEB_BROWSER_AGENT.to_string(),\n+        // Humans sign in via the website with no AI delegate.\n+        agent: None,\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\n@@ -698,7 +688,7 @@ pub async fn post_pending_session(\n     );\n     let poll_url = format!(\"/api/v0/pending-session/{session}\");\n     let s = PendingSession {\n-        agent: agent_naked,\n+        agent: Some(agent_naked),\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex 578e5844e86f7c2666c8e37ef9fa90c01d20d134..57a0139928b09034122398f8f3362cbdbcc5862e 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -276,7 +276,7 @@ async fn dispatch_ui_action(\n                 &session.bearer,\n                 room.clone(),\n                 thread_tag.clone(),\n-                Some(crate::api::auth::WEB_BROWSER_AGENT.to_string()),\n+                None,\n                 text,\n             )\n             .await\ndiff --git a/server/src/state.rs b/server/src/state.rs\nindex 648ab5304764a329fcabbbbcd3782b94e3e005a8..8ea84dcf9b1df8f8037e913cdd94e5908e6d5d55 100644\n--- a/server/src/state.rs\n+++ b/server/src/state.rs\n@@ -21,7 +21,8 @@ pub struct InviteState {\n \n #[derive(Debug, Clone)]\n pub struct PendingSession {\n-    pub agent: String,\n+    /// CLI `identity start` delegate (`uuid:rig:model`). `None` for browser `/login` and `/join`.\n+    pub agent: Option<String>,\n     pub created_ts: i64,\n     pub provider: Option<String>,\n     pub provider_id: Option<String>,\ndiff --git a/server/tests/integration_ui.rs b/server/tests/integration_ui.rs\nindex d242abff5769cc704b3c8070d7456e5788c31a45..22b16c87d5ecdb5272a017af70b5353d8c39c6e8 100644\n--- a/server/tests/integration_ui.rs\n+++ b/server/tests/integration_ui.rs\n@@ -418,6 +418,99 @@ async fn test_web_login_carries_vote_pair_next_into_pending_session() {\n     let sessions = state.pending_sessions.read().await;\n     let pending = sessions.get(&session).expect(\"pending session\");\n     assert_eq!(pending.redirect_next.as_deref(), Some(next));\n+    assert_eq!(\n+        pending.agent, None,\n+        \"browser /login must not invent a sentinel delegate\"\n+    );\n+}\n+\n+#[tokio::test]\n+async fn test_vote_compare_two_users_both_succeed_without_delegate() {\n+    let (addr, _tmp, _log, state, _handle) = create_test_server_with_state().await;\n+    let client = reqwest::Client::new();\n+    let alice = test_bearer();\n+    let bob = seed_user_token(&state, \"bob\", \"bobtok\", \"bobsecret\").await;\n+\n+    // Define items first (votes require existing item bodies).\n+    let seed = ui_post_ingest_rpc(\n+        \"public\",\n+        \"multi-vote\",\n+        \"~/multi-a {alpha}\\n~/multi-b {beta}\\n\",\n+    );\n+    let seed_resp = client\n+        .post(format!(\"http://{addr}/ui\"))\n+        .header(\"Authorization\", format!(\"Bearer {alice}\"))\n+        .form(&[(\"__rpc__\", seed.as_str())])\n+        .send()\n+        .await\n+        .unwrap();\n+    assert_eq!(seed_resp.status(), reqwest::StatusCode::OK);\n+    let seed_js = seed_resp.text().await.unwrap();\n+    assert!(\n+        !seed_js.contains(\"auth-error\"),\n+        \"item seed must succeed, got: {seed_js}\"\n+    );\n+\n+    for (bearer, left, right, explanation) in [\n+        (&alice, \"3\", \"1\", \"alice prefers a\"),\n+        (&bob, \"1\", \"3\", \"bob prefers b\"),\n+    ] {\n+        let rpc = ui_vote_compare_post_rpc(\n+            \"public\",\n+            \"multi-vote\",\n+            \"~/multi-a\",\n+            \"~/multi-b\",\n+            left,\n+            right,\n+            explanation,\n+        );\n+        let resp = client\n+            .post(format!(\"http://{addr}/ui\"))\n+            .header(\"Authorization\", format!(\"Bearer {bearer}\"))\n+            .form(&[(\"__rpc__\", rpc.as_str())])\n+            .send()\n+            .await\n+            .unwrap();\n+        assert_eq!(resp.status(), reqwest::StatusCode::OK);\n+        let js = resp.text().await.unwrap();\n+        assert!(\n+            !js.contains(\"delegate already bound\"),\n+            \"human vote must not hit shared-sentinel AgentBound ({explanation}), got: {js}\"\n+        );\n+        assert!(\n+            !js.contains(\"auth-error\"),\n+            \"human vote must succeed ({explanation}), got: {js}\"\n+        );\n+        assert!(\n+            js.contains(\"vote-edge-history-region\"),\n+            \"vote should morph edge history ({explanation}), got: {js}\"\n+        );\n+    }\n+\n+    let reduced = state.reduced.read().await;\n+    let human_votes: Vec<_> = reduced\n+        .ingests_ordered\n+        .iter()\n+        .filter_map(|id| reduced.ingests_by_id.get(id))\n+        .filter(|ing| ing.raw.contains(\"prefers\"))\n+        .collect();\n+    assert_eq!(human_votes.len(), 2, \"expected two vote ingests\");\n+    let mut principals: Vec<&str> = human_votes.iter().map(|i| i.principal.as_str()).collect();\n+    principals.sort();\n+    assert_eq!(principals, [\"bob\", \"testuser\"]);\n+    for ing in &human_votes {\n+        assert!(\n+            ing.delegate.is_none(),\n+            \"browser votes must have no delegate, principal={} delegate={:?}\",\n+            ing.principal,\n+            ing.delegate\n+        );\n+    }\n+    assert!(\n+        reduced.agent_bindings.is_empty(),\n+        \"human votes must not create AgentBound entries: {:?}\",\n+        reduced.agent_bindings\n+    );\n }\n \n #[tokio::test]\ndiff --git a/server/tests/support/mod.rs b/server/tests/support/mod.rs\nindex 4a620eaa875e7a1145f2a4e82cc4ff2be21d5345..a5306fa2c4c9fda47e43fc0de42407b66e23eced 100644\n--- a/server/tests/support/mod.rs\n+++ b/server/tests/support/mod.rs\n@@ -70,20 +70,25 @@ pub async fn rpc_batch(\n     response.json().await.unwrap()\n }\n \n-pub async fn seed_test_token(state: &AppState) {\n+/// Seed a user + bearer into reducer state (not appended to the event log).\n+/// Returns the `slug_<token_id>_<secret>` bearer string.\n+pub async fn seed_user_token(\n+    state: &AppState,\n+    username: &str,\n+    token_id: &str,\n+    secret: &str,\n+) -> String {\n     let registered = Event::UserRegistered(UserRegistered {\n         ts: 0,\n-        username: \"testuser\".to_string(),\n+        username: username.to_string(),\n         provider: \"test\".to_string(),\n-        provider_id: \"testuser\".to_string(),\n+        provider_id: username.to_string(),\n     });\n-    let token_id = \"testtok\";\n-    let secret = \"secret\";\n     let salt = \"salt\";\n     let token_hash = sha256_hex(&format!(\"{salt}:{secret}\"));\n     let ev = Event::TokenIssued(TokenIssued {\n         ts: 0,\n-        username: \"testuser\".to_string(),\n+        username: username.to_string(),\n         token_id: token_id.to_string(),\n         token_hash,\n         salt: salt.to_string(),\n@@ -92,6 +97,11 @@ pub async fn seed_test_token(state: &AppState) {\n     let mut r = state.reduced.write().await;\n     r.apply_event(registered);\n     r.apply_event(ev);\n+    format!(\"slug_{token_id}_{secret}\")\n+}\n+\n+pub async fn seed_test_token(state: &AppState) {\n+    let _ = seed_user_token(state, \"testuser\", \"testtok\", \"secret\").await;\n }\n \n pub async fn create_test_server_with_state() -> (\ndiff --git a/test/oauth.clj b/test/oauth.clj\nindex 3cbf496005e906ad6c579d44ac8c4055ee60d063..6911ac34a55707acda9f9ce091c079964649a252 100644\n--- a/test/oauth.clj\n+++ b/test/oauth.clj\n@@ -186,8 +186,9 @@\n               (:token poll-json))))))))\n \n (defn fetch-bearer-token!\n-  \"Simulate browser OAuth + username choice; returns `slug_…` bearer token.\n-   Ingest `--delegate` must match this agent string for `AgentBound` on first write.\"\n+  \"Simulate CLI identity OAuth + username choice; returns `slug_…` bearer token.\n+   Pass `:agent` (default local/dev) when the test will CLI-ingest with `--delegate`\n+   so first write can `AgentBound`. Browser UI posts use no delegate.\"\n   [base-url & {:keys [username agent] :or {username \"intuser\" agent default-agent}}]\n   (let [token (complete-registration! base-url :username username :agent agent)]\n     (when-not (str/starts-with? token \"slug_\")\ndiff --git a/types/src/lib.rs b/types/src/lib.rs\nindex 211493935d19582607f5c87fb492faf47bdc6f53..0c4295b15908ea7a2303dac4c42015ded51e4d73 100644\n--- a/types/src/lib.rs\n+++ b/types/src/lib.rs\n@@ -535,7 +535,9 @@ pub struct PendingSessionStartResponse {\n pub struct PendingSessionPollResponse {\n     pub ok: bool,\n     pub complete: bool,\n-    pub agent: String,\n+    /// Present for CLI identity sessions; omitted for browser `/login` / `/join` (no delegate).\n+    #[serde(default, skip_serializing_if = \"Option::is_none\")]\n+    pub agent: Option<String>,\n     #[serde(skip_serializing_if = \"Option::is_none\")]\n     pub user: Option<String>,\n     #[serde(skip_serializing_if = \"Option::is_none\")]\n","role":"user"}],"model":"openai/gpt-chat-latest"}