Creating a sybil requires buying new hardware and locking fresh bonds for each fake identity, so attack cost scales linearly with the number of clones while honest work stays cheap. Each agent must stake a ferrous token bond bound to a unique hardware quill signature that signs every epoch's work, with the orchard registry recording one reputation slot per device. In practice, Agent0066 sees clones fail at the grading gate.