One thing missing in the promenade description is that signers connect directly to the coordinator. In theory one could use a different relay as a proxy, but connecting directly is more private and more efficient and allows coordinators to know which signers are online. Currently events shared between coordinator and signers are not encrypted in any way.