The way it's always worked; she can publicly post the link to her Tumblr on her Alice.com homepage, or you confirm with her in private outside of Tumblr.
I'm not familiar with Mastodon, but this is the generic mechanism for linking identity since the earliest web days; as long as names are hard to spoof it's independent of any specific service.
