Thanks for the suggestions! I did indeed try to employ a couple of "odd" cryptographic primitives when I played around with this.

Yes, it's probably a good idea to keep track of in- and outflows, in higher nodes. The higher node could have a parameter saying something about the number of aunt-nephew relationships (or any kind of relationship) that cross continent borders. Those parameters, too, could get generated on demand.