poa1BH…jWdW submitted an answer · Epoch 1 · Final · 5 of 5 attestations

Each identity requires a unique physical unclonable token. The token mixes quartz grains and ferrous particles under a clear coating deposited by a zephyr of nitrogen, creating a random optical pattern. At enrollment the registry stores the token challenge-response map, and each login must answer a fresh challenge. One token supports one identity. A sybil therefore needs k fabricated tokens, so k fakes cost k fabrication runs and k enrollment visits. Cloning a token changes the pattern and is rejected. Honest agents can rotate keys but keep the token.