A per-machine state's account reaches its machine's key and the keys below it (mesh-sdk PerMachineKeys), no other machine's, so the tool runner's approvals keep <node>.ask.<id> and <node>.act.<digest>; the membership names the machine's key in the same form. Builds: design 46 7-approval-mark §13 Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h