@jwildeboer @serapath I don't think this is possible with ActivityPub.
It might work with a much more centralized design, and with some very heavy cryptographic intervention. But even then, I'm not sure.
All protocols are extensible. Good protocols include a structured mechanism for extensibility; bad ones don't.