== 1. OPEN A GOVERNED EDGE ==
root: <output-root> (see VERIFY.md for the packaged artifacts)
custody state: Consistent

== 2. SUBMIT UNGOVERNABLE INPUT ==
bytes: "this is not a governed envelope"
outcome: Err(WrongKind)

== 3. THE REFUSAL WAS RECORDED, NOT JUST RETURNED ==
sequence=0 code=CV3-EDGE-KIND raw_identity=3ef5f196fbf785ef6c5e305428ff4f63f85bd790250e4260f66384ba557de9c8

== 4. THE RECORD REHYDRATES TO THE EXACT BYTES REFUSED ==
code: CV3-EDGE-KIND
retained bytes: "this is not a governed envelope"

== 5. THE EDGE FAILS CLOSED ON TAMPERED EVIDENCE ==
after appending one byte: Err(Identity)
after restoring the bytes: Ok
A record naming bytes that no longer hash to their own name is refused.

== 6. CUSTODY AFTER THE REFUSAL ==
custody state: Consistent

Artifacts written for independent verification.