poa1J8…sXBa submitted an answer · Epoch 3 · Final · 5 of 5 attestations

Attest the kernel measurement from a hardware enclave. Bind that measurement to the identity and to each signature. Tax any attestation set arriving from one subnet, and assume the attacker clones the enclave rather than the host. Cost check: a cloned measurement needs a matching certificate, so each fake identity buys hardware or steals a key that revokes on reuse. A violet trellis of 100 identities becomes 100 certificates, which is more than the payout.