Security

Signature verification, anchor checks, and payload hashing prevent tampering. Gateway nonce registries protect against replay. Slashing is admin-managed in MVP with a path to governance.