Three peers join the SAME room → SAME gossip topic, so all three receive the same
broadcast bytes off the wire: A sends, B (same account → same key) must decrypt,
C (wrong account → wrong key) must NOT. If C — sitting in the identical topic,
handed the same ciphertext — can't read what B can, the payload is sealed
end-to-end, not merely relayed. Documents/locks in the E2E property of the iroh
transport (ChaCha20-Poly1305 seal before gossip; rendezvous + topic membership
grant no content access).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Patrick Ecord
3f023402e3
