Denied-pool identity: version over mandatory relational content, with false-positive tests

The deny-list in microcosm.data.denied_pools (PR #857) identifies the sealed candidate-26 pool by four identities; the packaging-independent one (version 2) is the sorted multiset of household weights plus the count. Sol's final gate round on #857 noted it is not semantic: changing one weight admits otherwise unchanged content, and a legitimately corrected pool that keeps the same weights would be falsely denied. Follow-up: define a versioned identity over mandatory relational content and provenance (households, memberships, and the support/clone structure, not weights alone), with tests for (a) same weights, different payload and (b) changed weights, same support, plus a reproducible derivation receipt for the sealed candidate-26 identity. Refs #856, #857.

🤖 Generated with Claude Code

Start in microcosm.data.denied_pools and read the context from PRs #856 and #857, especially the final-gate concerns. Define the versioned identity around the named relational content and provenance, then add tests for both payload and weight changes and a reproducible derivation receipt for the sealed candidate-26 identity.