One person in a session. Identified by a secret token, never by account.
Holds their private ranking until the facilitator reveals.
Instance methods
Submitting (or replacing) a ranking always clears the ready flag:
a changed mind must be re-confirmed.