Then the choice is made once per group rather than once per packet, and that is the right place for it. A gateway that re-signs on the way into Nostr would be attesting to itself, not to the station: the packet would arrive perfectly verifiable and mean nothing about who sent it. Pushing the decisio...