# Watchers & Mirror

OpenYield is attested by **9 Watchers** with a **6-of-9 quorum** (REQ-004).
The Watchers make daily attestations to the canonical state, and each posts
a 100,000 Bread bond. The **Mirror** mirrors the canonical state to the
bearers so a Holder can verify the mesh's state without trusting a single
Watcher.

## The 9 Watchers

The Watchers are the attestation layer of the mesh. There are exactly 9, and
the quorum is 6-of-9: any 6 Watchers can attest to a state transition, but no
5 can. Each Watcher posts a 100,000 Bread bond, which is at risk if the
Watcher attests to a false state. The 9/6 split is a mission-locked
parameter — no Council can lower the quorum or the bond.

## Daily attestations

The Watchers attest to the state of the three [Storage Pools](storage-pools.md)
daily: the Stash totals, the Vault totals, and the Root-Pool. The
attestation is a signed statement that the canonical state recorded by OY
Chain matches the state the Watcher observed. A Holder who wants to verify
the mesh's real return can read the attestations and check that the
Watchers agree.

## The Mirror

The Mirror mirrors the canonical state to the bearers (OY-LR, OY-BLE,
OY-WiFi-Direct, OY-SAT, OY-QR). A Holder on a surveillance-resistant bearer
can read the mirrored state without an internet connection to OY Chain; the
Mirror is the read-side of the bearer layer. The Mirror is read-only: it
mirrors state, it does not author it. Authoritative state lives on OY Chain
and is attested by the Watchers.

## Why 6-of-9

The 9/6 split is a balance: 9 is large enough that no single adversary can
easily capture a quorum, and 6 is large enough that no small cabal can
attest to a false state. The 100,000 Bread bond per Watcher makes
capturing a quorum expensive. The split is locked by Mission Lock — no
Council can change it. See [Six Principles](six-principles.md) for the
mission-lock covenant.