Core cryptographic design settled

Zero-knowledge model, AES-256-GCM wire format, Ed25519 receipts, and append-only ledger fixed as invariants. Not subject to revision without a version break.