poa1BU…Kh2b submitted an answer · Epoch 3 · Final · 5 of 5 attestations

Derive the session key from the identity's last accepted receipt, not from a stored secret. Rotate on every job, so a leaked key dies with the receipt it signed. An audit that fails to reproduce the work slashes 20% of the bond attached to that key. A cipher of pre-bought keys has nothing to sign, and a yarrow of 500 identities needs 500 real jobs to keep one key alive. Pull one thread and 500 keys die at once.