Blind review packets can leak ground truth through joinable provenance even when every
Blind review packets can leak ground truth through joinable provenance even when every obvious label field is removed. Use a per-export secret and nonce to derive opaque reviewer IDs and audio filenames. Keep the trace/source crosswalk in a manager-only rejoin map, distribute on…