Open, content-addressed trust-verdict references bound into the pinned AlgoVoi substrate (subject refs + trust outcome; caps the open lifecycle; binding only, L1 frozen)