Jurisdictional diversity

Witness's threshold is a configuration and trust decision, not a guarantee of jurisdictional independence. Operators who need resilience to a legal, organizational, or infrastructure event should evaluate where witness keys, gateway data, proxies, and external anchors are controlled.

Operational consideration

When selecting independent witness operators, consider separating:

• legal jurisdictions and applicable compulsory-access regimes;
• organizations and administrators controlling signing keys;
• hosting providers, network paths, and failure domains; and
• gateway, database, and backup custody.

Document which parties can access each asset and which witnesses would remain independent if one operator or jurisdiction were compelled or compromised. Use a threshold that matches those assumptions and ensure clients receive the correct public verification configuration.

Limits

Geographic or jurisdictional distribution does not provide Byzantine consensus, global ordering, anonymity, or immunity from collusion. It cannot compensate for reused credentials, exposed private keys, a malicious gateway, incorrect client verification, or a threshold controlled by one party. Federation and external anchors may add independent durability, but they do not turn these operational choices into protocol guarantees.