POPchain security is not one mechanism. It is the relationship between a principal, fresh physical evidence, explicit policy, and an append-only network record.
Four boundaries
- Identity establishes who a record refers to.
- WARDEN establishes whether evidence is fresh.
- WEIHR establishes what action is allowed.
- POPchain records what was accepted.
No single label should be able to silently stand in for all four.