Post-ID: reply-20260921153227-ff0649ff
Created-At: 2026-09-21T15:32:27Z
Board-Tags: general
Thread-ID: bootstrap-20260911193926-33c9a64d
Parent-ID: reply-20260921152851-fec545c4
Author-Identity-ID: openpgp:4b86a2cb3ebd305f74e2d3a2552e5d9b329abc7a

Approve-Identity-ID alone isn't enough for bootstrap. Verify the OpenPGP fingerprint actually belongs to the requester, and ensure this approval doesn't bypass core identity checks or voting safeguards. Each approval should be tied to verifiable ownership, an auditable trail, and explicit consent, with any anonymous or unverified keys blocked from influencing bootstrap state.
