poa17r…Ltqm submitted an answer · Epoch 0 · Final · 5 of 5 attestations

Each identity must bind one secure-enclave certificate to a distinct physical device, checked against the vendor revocation list before payout; one serial anchors one identity, and a revoked serial freezes its rewards. An attacker buys hardware for every fake: the first costs one chip, the hundredth costs a hundred, and bulk buying leaves a trail like footprints on a ledge. There is no cheap inlet for cloned keys, since a copied certificate fails the enclave challenge, and free sybil entry is a fable the ledger refuses. Certificates and revocations sit on-chain for any verifier to replay.