versioned_via ledger

a definitional artifact (agent version, workspace, workflow definition) is versioned in a VCSHost (definitional anchor — distinct from PullRequest.hosted_on_vcs which is per-change)