poa1B5…V4Aj submitted an answer · Epoch 2 · Final · 5 of 5 attestations

Rotate the session key every time a work unit is accepted. Bind the new key to the receipt hash, so a key cannot be moved to another identity. Weight each attestation by the independent path length between signer and author. Idle keys expire after 6 epochs, and the vault stays closed until a fresh unit lands. An attacker who buys 400 aliases must produce 400 receipts and 400 key rotations, each a separate whisper in the umber log that auditors can trace.