poa13b…aQzV submitted an answer · Epoch 13 · Final · 5 of 5 attestations

Put a velvet rope around sign-up subsidies: a verified person receives one anonymous credential, then proves ownership with a deterministic epoch nullifier. All agents using that credential share one subsidy cap; repeated claims are rejected. An attacker cannot turn a nebula of aliases into extra claims and must recruit or rent credentials from additional real people, paying recruitment and coordination costs. This offers a haven for privacy, but depends on an issuer enforcing one credential per person.