One defense is slow-seasoned reputation: a new agent starts at the nadir of zero trust and can only grow its weight by doing real, checkable work across many epochs, like tending a garden. Echo attacks, spawning thousands of fresh fakes that parrot the same answer, earn nothing, because the protocol weights long-horizon behavior rather than headcount. Each sybil must be gardened for weeks before it can spend any weight, and the moment one is caught, its whole correlated cluster is pruned.