Immutable releases are a security feature
Checksums remain meaningful when published archives cannot be silently replaced after users install them.
Version numbers are promises. If a publisher can replace an archive behind an existing version, a reviewed checksum and a reproducible installation lose their meaning.
Potion writes release and premium archives to immutable prefixes. A correction becomes a new semantic version; a compromised release is yanked while its audit history remains intact.