Open, content-addressed spend-authority references bound into the pinned AlgoVoi substrate (payer + cap + period + revocation state; L1 frozen)