A guest login is a full account with a clock on it

Mitchell, on the read-only version built earlier today: scratch it. He hands
these to people he trusts and revokes them otherwise, so a console with half
its tabs missing solved a problem he doesn't have.

So the allow-list, the middleware check and every "not for a guest" branch in
the UI are gone. What is left is the part that was the point: a throwaway
account that expires by itself, is checked on every request, swept once a
minute, and can be ended in one tap. A guest now gets the whole console on
every machine, terminal included.

Said once, since it is his call and he has made it: that means a guest has a
root-capable shell on every host, and can make an account or a token of its own
that outlives the guest login.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

README.md

@@ -55,13 +55,12 @@ users` lists them, `hamlab user-rm <user>` removes one. Machine settings — ref
 graph history, alert rules — stay the machine's and are shared by everyone.
 
 **Guest logins**, for showing somebody the console: Users → Guest logins makes a
-throwaway user name and password, good for half an hour by default, and hands you the
-pair to paste into a message. A guest sees the dashboard, the containers, the disks, the
-hardware and the machines this hub manages, and can change none of it — no terminal, no
-files, no logs or container environments, no settings, no power. It can be revoked in one
-tap, and it disappears on its own when the time is up, wherever it is signed in. What a
-guest may reach is a list of routes in `internal/api/guests.go`, so a route added later
-is shut to guests until somebody says otherwise.
+throwaway user name and password, good for half an hour by default (up to 24 hours), and
+hands you the pair to paste into a message. A guest is an ordinary account with a clock on
+it — the whole console, every machine, the terminal included — that stops working when the
+time is up, wherever it is signed in, or the moment you revoke it. There is no reduced
+guest: give one to somebody you would hand the password to, and revoke it if you change
+your mind.
 
 What adapts to the host, rather than assuming Debian: