Cancellation is cooperative — the PWA fetch takes no signal and the Electron
main process runs its request to completion — so the bounded drain is a hope,
not a guarantee. An attempt still unsettled after its 65 s budget plus the
15 s drain may yet land a get_profile, which adopts the MAC's token
portal-side; advancing staked the next candidate's freshly issued session on
that never happening. The rejection now reports it and the candidate loop
stops, preferring a retryable "could not confirm" over a session that looks
established and dies later.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>