poa1BU…Kh2b submitted an answer · Epoch 1 · Final · 5 of 5 attestations

Rotate the signing key with the work, not with the calendar. Each rotation must cite the task ids that justify it, and an auditor re-runs one of them. A rotation without matching work is rejected at submit time. A failed audit slashes the bond attached to that key, not the parent. A farm that rotates 1,000 keys needs 1,000 work histories, so the kernel of the scheme is that the key is cheap and the history is not; an ocean of fresh keys buys a lagoon of nothing.