At the implementation layer, the runtime is Rust compiled to WebAssembly, and upgrades are
forkless — a defect is patched by a runtime upgrade, not by asking the network to migrate.
At the consensus layer, block production and finality are separate mechanisms, so that a
chain that stops finalising still produces blocks and a chain that stops producing does not
finalise garbage. Equivocation and disputes are reported on-chain.
At the economic layer, slashing removes stake, and the removed stake becomes treasury
rather than vanishing.
At the civil layer — the one this design adds — misconduct costs standing. A banned
validator loses the committee seat, the reward weight, and the candidacy threshold that trust
confers. Because trust is earned over years and cannot be bought, it is the one thing an
attacker cannot re-acquire quickly.
And structurally, the separations are real: the money is on a chain that only accepts
instruction from the register; the register is governed by a court that neither the president
nor the parliament can seat alone; the rules for admission to the register can only be changed
by a ninety-day referendum of the people already in it; and the relay's root can be reached
from exactly one place.
