Give the confessional web push. A service worker (push-only, no fetch handler) is served from its own origin; readers opt in from a toggle on the gate. Publishing a page broadcasts to a new topic, answering a question rings only the asker's devices, and the chat instance — until now deliberately excluded from push — gets its own dedicated topic instead of the shared mood topic it was misconfigured to share. Registration accepts the second tenant, storing users under the prefixed-sub convention, and the reader-side topics require a signed-in account on that tenant so chat text never reaches anonymous registrations. Claude-Session: https://claude.ai/code/session_01FryvSZ4bmGcpc7q13FNaCj