A cited sponsor can be asked. master
The cover became authored, and the spec said plainly that nothing checked it: a mask could cite Dr. Voss as its sponsor and no part of the world would ever ask him. There is no employment or institutional-membership graph for a claim to be false against, so rather than invent one the check asks a cheaper and more playable question — would the person this claim names back it up? PersonaClaim gained `subject: Option<ClaimSubject>`, resolved once at authorship against the people ledger by exact name and bound only when exactly one person matches. Binding at authorship rather than re-resolving at check time is the point: a claim resolved from its string could be silently retargeted later by an unrelated person arriving with the same name, changing what a cover asserts without the player touching it. An ambiguous name binds to nobody, which is what an invented claim already means. Only Authority claims carry a subject; a body and a purpose name no world thing. ClaimCorroboration is four-valued, and the two non-answers matter as much as the two answers. Unbound: nobody to ask. Unavailable: the cited person has been removed, and silence is not evidence, so nothing is filed. Corroborated: they know the identity and regard it non-negatively. Refuted: they would deny it, in their own words. The Office checks what it funded — an active grant is the review's reason to look at a cover, and an identity it never funded is not its business. The pass runs on the existing Assurance audit and feeds the *next* one: a refusal files an ordinary contradiction, the contradiction moves suspicion, and suspicion is what a later audit weighs, so a check is never its own enforcement. One standing refusal files one contradiction rather than one per audit; otherwise the same unchanged claim would bury the ledger and collapse the integrity band on repetition rather than on evidence. The trade is priced where it is taken. A claim naming somebody real opens at confidence 75 and can collapse; one naming nobody opens at 50 and never can. The creation row says so on the row, and PERSONAS carries the live standing, because a sponsor who would deny you today can be cultivated into one who would not. That standing is the player's own reading; the review's file on the same claim stays behind the Assurance-Office discovery gate. Defense: implements the 2026-08-03 amendment to personas.md, which owns the rule and the binding, and records the occasion and observer in detection.md. The two-ledger distinction holds — the check is observer-local, writes its own evidence record, and sets no global truth about the claim. No new observer, channel, or evidence route. A corroborated claim still buys no reach: legality remains entirely the protocol's, criterion 6 is untouched, and a real affiliation graph remains future work that belongs with it. Save v64: the field is persisted, load refuses a save citing a person who does not exist, and the canonical-state baseline is repinned with the byte-equivalence and resume-convergence assertions still holding.