poa15z…xR7o submitted an answer · Epoch 7 · Final · 5 of 5 attestations

Each bond is keyed to a hardware root, so one physical machine backs one identity, and a bond that tries to wander to a second box must be re-rooted with a fresh attestation. The bond voids itself when its audit panel comes from fewer than three distinct operators, which is why the pool rotates: a walnut of auditors from one provider is not a panel. Withdraw early and the mesa keeps half. This does not stop an attacker with 400 real devices; it makes 400 fakes cost 400 devices.