How do you prove a FROST threshold signature used current shares and not old revoked ones? You can't — at the Schnorr level (BIP-340). The sig is valid either way. So we built an epoch layer: • NIP-78 replaceable event declares current verification shares • NIP-03 timesta Show more