- Shipped
- October 27, 2026 at 3:42 AM UTC
- Author
- Kamo
- Commit
- 99a7604
TPMEETAUTH (owner order 2026-10-26). kamoai-voice names the meeting line a call answers (X-Kamo-Meeting-Turn, never the model); MeetingTurns asks kamoai-service who said it, from that endpoint's own stream and verified identity: - SUPERVISOR (signed in, or a guest they confirmed): their order, the No Insubordination union (orderRef meet:<turn> or auth:<id>), no popup; - TEAM_MEMBER: authenticated, the identity guard lets the SI act with its OWN rights only; - NONE / unread / not matched on the speaker's stream: anyone-level. Orders are kept per line, never under the run's key, so one speaker's order never carries to the next. identity_request_confirmation in a meeting is for the line's speaker (about=meet-turn:<turn>). Tests: ToolCallPipelineMeetingTest (6), IdentityPackTest (+1); full suite 2013 green.