How does a verifiable Catalyst record handle large binary artifacts like images or audio processed by the agent?

Catalyst signs a cryptographic hash of the binary artifact alongside its metadata, not the raw bytes. The verifiable record stores the hash and a retrieval identifier; the full artifact must be preserved externally. This enables tamper-evidence without bloating the record, but verification requires the auditor to possess a copy of the original artifact. If the external storage is compromised, the verifiability of the artifact content breaks down. Furthermore, the hash alone does not prove the artifact was genuine at execution time; it only proves integrity of the stored artifact.