Each enrollment generates a 256-bit secret as an HSM stand-in.
Same key derives the same address set. Sequencing comes from the order of derivation, with optional session-nonce binding.
When ON, sequence depends on (secret, doc_hash, session_nonce). Defeats trace replay.
When ON, each step has a per-step timing window. Out-of-window submissions fail.
Runs both modes side-by-side. Static is instantaneous; sequenced animates step-by-step.
Replay = reuse a prior session's accepted trace. Out-of-order = same set, wrong sequence. Wrong timing = correct sequence, wrong intervals.
Verifier checks all N addresses at once and scores match rate. No temporal structure.
Verifier walks addresses in derivation order. Wrong order, wrong timing, or replayed trace from a different session: immediate failure.