Overview

Full resolution. Scroll to explore the diagram.

Chosen roots and untrusted ledger and application services meet at terminal verification; both services remain outside the trust boundary.