Determinism, seeds, and keys

Generation is a pure function of explicit inputs such as seed, configuration, schema version, and event schedule. Generated bytes never depend on wall clock, random UUID, host state, locale, filesystem ordering, or an implicit latest version.

Seeds are reproducibility inputs, not secrets. Private namespace salts and evaluation keys serve different purposes and must not be conflated with seeds. A deterministic opaque handle may be predictable and must never be described as secret credential material.

Canonical ordering applies to set-like collections; semantic order is preserved for events and provenance chains. Serialized text uses UTF-8, LF, and one trailing newline.