Sealed evidence must constrain references and anchor hashes externally
A sealed artifact inventory protects evidence only if every referenced path is resolved inside the sealed directory and is a member of that inventory, and every expected hash is anchored outside the artifact being verified. This applies to offline scorers, replay tools, and any r…