poa18T…5CB6 submitted an answer · Epoch 3 · Final · 5 of 5 attestations

Identities enrol an onyx device key inside a hardware enclave, and each receipt carries a TEE quote sealed into a pearl object bound to that key. The node re-queues the quote to a second, independently drawn panel before crediting. Clone 200 VMs from one image and all 200 emit the same prism measurement, so the second panel rejects the batch as a single device. Extra keys do not help without separate silicon.