{
  "service": "NENRIN witness intake (JIDEC ledger)",
  "spec": "NENRIN v1, anchored as ledger entry #19",
  "what_this_is": "Any party may submit a verification walk (jidec-path-v1 with a witness field) it took of any public endpoint. Accepted submissions sit in a public pending pool and are anchored in daily batches as nenrin-witness-batch-v1 ledger entries. Acceptance is mechanical: schema, size, rate, duplicate, and signature validity if a signature is present. There is no editorial review and no route by which the operator declines a schema-valid submission.",
  "limits_stated_not_hidden": {
    "max_bytes": 65536,
    "daily_global": 50,
    "daily_per_ip": 5,
    "batch_max": 200,
    "note": "These caps exist because the pool is free to submit to and the chain is append-only. A schema-valid submission inside the caps cannot be refused."
  },
  "signature": "Optional Ed25519 over the exact record_canonical bytes (signature_ed25519_b64 + public_key_ed25519_b64). Present and invalid: rejected. Absent: accepted and recorded as signed: false.",
  "privacy": "No IP addresses are stored. Rate counters use a 16-hex prefix of sha256(ip) and expire within 25 hours.",
  "how_to_submit": "POST /witness with {\"record_canonical\":\"<exact bytes of your jidec-path-v1 walk, including a witness:{name,vantage} field>\"}",
  "pool": "https://ledger.horizonshield.dev/witness/pending"
}