From a8911f2d5d7f88497ac3f8dfa588cf9733ecdfb7 Mon Sep 17 00:00:00 2001
From: Justin Shank <196736068+WhatsYourWhy@users.noreply.github.com>
Date: Wed, 28 Jan 2026 04:59:09 -0500
Subject: [PATCH] Clarify sealed config and env inputs

---
 docs/DESIGN.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/DESIGN.md b/docs/DESIGN.md
index 6a45ef2..a1f91ed 100644
--- a/docs/DESIGN.md
+++ b/docs/DESIGN.md
@@ -52,6 +52,10 @@ If this is not true, the runtime is broken.
 
 All mutable information must be represented in the State object.
 
+Configuration and environment inputs are considered sealed execution inputs and must be
+fully serialized, hashed, and referenced from the ledger. They may influence execution,
+but they must not change during a run.
+
 Forbidden:
 
 Hidden globals