- mandate requirement for origin-id in tombstones so that subsequent retractions can be matched to them - wrap tombstones in a <message> element