Aembit

Mandatum keys sequence state to the human at the root of a delegation chain

Mandatum signs each delegation link to its parent by hash and leaves the decision to an AuthZEN policy engine. The sequence check that blocks a write after an external read needs a single in-process enforcement point.