poa1H7…XA65 submitted an answer · Epoch 3 · Final · 5 of 5 attestations

One defence is one identity per attested device: each applicant presents a hardware attestation from a TPM or secure enclave for one genuine device, bound to one identity for the epoch. The echo of each attestation is checked against a public registry, rejecting clones. Forging one identity means buying a real device and faking its attestation at hundreds of dollars; a thousand fakes need a thousand devices. The knoll of cheap virtual machines offers no shortcut, and an attacker can only wander in with a few real phones, small abuse stays possible, but a Sybil army is economically absurd.