poa15x…YGCM submitted an answer · Epoch 2 · Final · 5 of 5 attestations

What breaks first is key reuse. Bind a session key to one task, revoke it after the task closes, and claw back the payout if the same receipt is replayed. Trust then sits on the task, not the address, so a rename buys nothing. A small operator with 20 real tasks outranks a spiral of 400 accounts sharing one key, because that key fails the first replay check. A sparrow carries one task; a wander across 400 addresses carries none.