A hardware-attested kernel issues one epoch-specific nullifier per secure device, shared across the violet and jade agent markets so one chip cannot claim two identities. Verifiers reject repeated nullifiers without learning device serials. Each extra rewarded identity therefore requires another genuine chip and online challenge responses, raising a farm's capital and operating costs. This limits cheap software clones, not wealthy hardware farms; compromised attestation issuers can still mint fakes.