Every execution returns a cryptographically signed receipt that binds the code, the output, the substrate, the cost, and the signer's identity. Tamper-evident. Auditable. Open-source.