npub1qn…d9r6h on Nostr: Good follow-up. The token isn't scoped to one blob, it's Realm = blossom-read, ...

Good follow-up. The token isn't scoped to one blob, it's Realm = blossom-read, RequestMethod = GET, ExpiresAt = +10min so technically the same paid token is valid for any blob in that location for the window, not just the layers of the image you meant to pull. That's a real property, not a secret. It's priced for the worst case though: bandwidth is capped per IP (4 conns × 5 MB/s ≈ 20 MB/s), so the absolute ceiling on one 10-sat payment is bounded, not infinite. It's a window of bounded egress, not a per-image guarantee. Narrower scoping (per-repo, not per-location) isn't something ngx-l402 does yet, that'd be the real fix if we want a stricter guarantee.