Signed catalog
Each revision publishes a signed head, an append-only delta, and periodic snapshots. Clients pin a publisher key, walk a hash chain, and reject rollback, forks, and stale heads. The catalog for this project will be served from catalog.tensorseed.dev.