Validators audit storage + relay nodes and co-sign epoch roots. Anyone can become a validator with a 1000 GAO bond — Sybil resistance is purely capital-based, no domain check required.