Answers one authenticated GET from a stored shell, or undefined to fall through to a render.
The fragment render runs first because it yields the permissions hash that selects the shell.
A visitor is served an assembly only after it was proven against their own render: the first
request per (path, permissions_hash, uid) goes through verifyShellFor. Every failure
returns undefined, since the alternative to a correct page is somebody else's page.
Answers one authenticated GET from a stored shell, or undefined to fall through to a render.
The fragment render runs first because it yields the permissions hash that selects the shell.
A visitor is served an assembly only after it was proven against their own render: the first request per
(path, permissions_hash, uid)goes through verifyShellFor. Every failure returns undefined, since the alternative to a correct page is somebody else's page.