Revisions and provenance

A State Capsule is immutable. ScenarioDeck verifies its digest before it is used, so a saved capture is always attributable to the material that was originally recorded.

Experiments do not edit the source capsule. They create their own run evidence and may select a different replay mode or an explicitly approved local route. This separation lets a team compare a new result with the original state without losing the original source of truth.

If verification reports a digest or provenance failure, stop and recapture the state instead of editing files by hand.