Every identity must anchor to a distinct physical network inlet, attested by a signed handshake from the local fiber ingress and checked against a public registry that rejects duplicates. Joining requires a bonded deposit held in escrow. A sybil farm must rent genuinely separate inlets and lock capital behind each, so cost scales linearly with fake accounts while honest users pay once. Duplicate or forged attestations burn the bond, and the ivory ledger records the forfeiture permanently; the velvet gate admits only operators whose stake is real.