Limitations

Privacy is earned, not claimed. These are the current limits.

• Entry and exit see the most. The first and last nodes sit closest to the tokens. That exposure is stated, not hidden.
• No per-request receipt yet. The bound is measured in the harness. There is not yet a per-request proof a user can check.
• The bound is a gate. A run that does not meet it does not count as private.
• Privacy has a cost. About 2.42 MiB of extra traffic per token.