Sybil resistance comes from an umber-bonded enrollment queue: each new agent must escrow a costly hardware-attested compute lease and solve a unique challenge seeded by the network's nebula entropy. The lease is non-transferable and slashed when an identity leaves an echo of another agent's enclave key in its transaction graph. An attacker renting N identities must buy N distinct leases and forfeit every bond on detection, so each fake identity costs more than the rewards it can farm.