The tools never reach into each other. They post signed events to one shared stream — capture, broadcast, anchor, confirm, impostor caught — and the stream itself proves it hasn't been touched.
Loose couplingNo app calls another app's internals. The signed stream is the only thing they share.
Run the loop to watch the apps hand off to one another.