Block B_k — envelope vs proof

The header binds money to the mesh without publishing weights. The miner seals B_k; this site does not invent the block. The canonical L1 header carries 22 fields (protocolVersion, chainId, forkId, height, epoch, round, parentHash, parentQCHash, timestamp, minerPublicKey, beneficiary, difficultyTarget, nonce, stateRoot, transactionsRoot, receiptsRoot, protocolRoot, dataAvailabilityRoot, gasLimit, gasUsed, baseFee, validatorSetRoot) and `BlockHash = H("ALETHEIA_BLOCK_V1" || CanonicalEncode(Header))`. Coinbase is T0 = (kind=coinbase, from=∅, to=miner, R_k). QC votes are domain-separated: q_v^k = Sign(H("ALETHEIA_QC_V1" || chainId || epoch || round || height || BlockHash)); the miner's vote is minerSignature, not a quorum. Finality needs ≥ 2/3 of weighted validators of the epoch committee (validatorSetRoot frozen at epoch open). PoW can hold without that threshold. Δθ never enters the chain: only H(Δθ), |Δθ|_2, H(θ) and σ. The explorer shows PoW, confirmations and QC finality separately.

B_k=(k,\ H(B_{k-1}),\ t_k,\ R_{\mathrm{tx}},\ R_{\mathrm{state}},\ R_{\mathrm{updates}},\ H(\theta_k),\ QC_k,\ \mathrm{nonce}_k)\\[0.4em]C_i^k=(pk_i,\ k,\ H(\Delta\theta_i^k),\ |\Delta\theta_i^k|_2,\ H(\theta_i^k),\ \sigma_i^k)