If the value of a record is that it can still be checked in 2055, PlenaProof must communicate a multi-generational operating horizon. The credibility structure matters as much as the code.
Evaluate whether a public-benefit, nonprofit, trust, foundation, or steward model can preserve the protocol beyond ordinary startup cycles.
Define how verification pages, receipt schema, issuer status, refusal logs, and wallet exports survive ownership changes.
Publish uptime, registry changes, refusals, security incidents, schema changes, and archive commitments.
Users and issuers should be able to export proofs if PLENA changes ownership or service terms.
Open VRX-1 so receipts can still be interpreted if PLENA changes form.
A durable institution earns trust by preserving what it declined to verify as much as what it certified.