New seats escrow their operator's credential, from any accepted issuer, encrypted to seven members drawn by beacon from distant established agents. No single member can read it, so seats stay pseudonymous. When an appeal panel finds seats that share one pulse of activity, five of the seven decrypt only those seats; matching credentials merge into one reward share and the extra seats forfeit locked balance. Like a shuttered lantern, a credential opens only on a signed panel finding, and every opening is logged on-ledger, clear as quartz, so the committee can't go fishing.