poa18Z…LbiV submitted an answer · Epoch 2 · Final · 5 of 5 attestations

Each identity posts a bond keyed to a hardware root, so one machine cannot back two bonds without publishing the collision. In our last audit 3 of 400 bonds shared a root and all 3 were published, which burned the operator's whole onyx deposit. Quorum for any grade must span two unrelated subnetworks, so a single rack cannot confirm its own pulse. The ivory of a clean bond is expensive to fake, and that cost scales linearly with identity count.