Avoid rehashing validated Graph execution metadata during Candidate loading

test/candidate-metadata.test.ts

@@ -5,6 +5,7 @@ import { join } from "node:path";
 import { tmpdir } from "node:os";
 import { CandidateMetadataBudget, readCandidateMetadata } from "../src/execution-world/metadata.js";
 import { loadCheckedInstallationCandidate } from "../src/execution-world/candidate.js";
+import { hexDigestAsync } from "../src/execution-world/plan.js";
 
 test(
   "a real checked application can stage its replacement within the default metadata budget",
@@ -21,6 +22,8 @@ test(
       try {
         assert.equal(budget.snapshot().bytes, retained * 2);
         assert.deepEqual(second.reference, first.reference, "Compaction preserves exact checked identity");
+        assert.equal(first.world, await hexDigestAsync(first.graphExecution));
+        assert.equal(second.world, first.world, "Replacement retains the checked execution identity");
         assert.equal(second.graphExecution.kernel, second.kernel, "Graph representation shares the validated program");
         assert.equal(second.graphExecution.queries, second.queries);
         // A deliberately tighter pool admits the serving installation but must