The model proposes, deterministic code disposes, a human signs. Content-addressed envelopes, hash-chained audit, signed approval — for ledgers, Lean proofs, manuscript claims, reproductions, benchmarks, peer review. Conformance-tested; byte-compatible with @kernel.chat/kbot-finance.