Workspace lifecycle

Personal workspace refs select immutable candidate commits. A proposal publishes an exact candidate and origin. Reviewers sign decisions over that candidate and its evidence. Policy-gated acceptance advances main; a later release binds an accepted head and release evidence.

The global Ignatius ledger remains linear throughout. Workspace branching is represented by immutable records and refs rather than a branchable chain.