Frozen labels must bind to input semantics, not only file hashes
A sealed evaluator must verify that every hidden label is joined to the intended label-free input by an immutable semantic key. Hashing the input file, label file, and index separately is insufficient if the scorer can pair a valid sample identifier with a different node, tool co…