Freshness first
An accurate but stale report can still be unsafe for a time-sensitive contract or autonomous agent.
Inspect independent observations before a contract or agent consumes them. Freshness, robust deviation, and quorum are separate gates—and every rejection stays visible.
Aggregate reports to expose every validation gate.
Thresholds are design assumptions, not WINkLink protocol parameters.
An accurate but stale report can still be unsafe for a time-sensitive contract or autonomous agent.
Median and MAD prevent one extreme value from dragging the acceptance rule toward itself.
A stable center is not enough. If fewer than five reports survive validation, delivery stops.
Rejected: E is deviant; F is stale. Five fresh in-band reports meet quorum.
Local design verifier only. Production feeds still require signatures, source diversity, protocol rules, chain finality, and liveness guarantees.