Card-owned workflow state. A workflow now carries an immutable owner id in both stelow.json and state.md; equal names can never reuse another card's directory, stage, or artifacts.
Fail-closed state reads. Cards with unverifiable ownership stop with a reseed instruction instead of falling back to project-root state.
Changed
Legacy workflows are not adopted. State written before 0.4.1 carries no owner id, so it stays deliberately unverifiable: reseed such a card to give it a fresh, owned state directory. Nothing is guessed by name or by a matching dir_hash.