k-anonymity

A data-publishing constraint that requires every published aggregate to be derived from at least k contributing accounts. AdTAO’s default floors are n ≥ 10 accounts for cross-account aggregates and n ≥ 5 for placement-level data; small subnet pools may raise the floor further per epoch. Enforcement happens at the aggregation source, not at publication — the site never sees account-identifiable data.