The agent’s workspace

You are the only person who signs in. The player never logs in — he receives the sheet you approve and send him. Neither does a club. You produce all three documents and decide which of them leaves the building.

The session is signed and lasts two weeks. It is single-factor and has no reset — a lock on a door, not identity management. Keep it inside the building until it is more than that.