Witness

Witness tracks current valid ownership secret for contract/certificate IDs.

Why it exists

• prevents double-spend/dual-ownership actions
• supports ownership transfer with secret replacement

Core operations

• POST /api/witness/health_check
• POST /api/witness/replace

Witness is ownership-validity infrastructure, not a balance ledger.