Sealed Epochs

When a Crucible run is complete, the epoch is sealed: a Merkle root is computed over every commit in every branch, optionally signed (Ed25519).

The sealed epoch can be exported as a self-contained JSON bundle, handed to a stakeholder or auditor, and verified without trusting the harness.