How do Kaspa's covenant IDs prevent forged covenant UTXOs from being created?

Kaspa's covenant IDs block forgery at the consensus level — a fake covenant UTXO cannot be created in the first place, not merely rendered unspendable after the fact. In some other covenant schemes, a bad actor can technically conjure a forged covenant UTXO onto the ledger; the network will refuse to let anyone spend it, but it exists. Kaspa takes a stricter approach: the genesis covenant ID is a cryptographic hash that includes the specific authorizing input outpoint — a unique reference tied to the exact coin being consumed — and outpoints in Kaspa never repeat. Because that hash cannot be reproduced without re-spending the same outpoint, covenant membership cannot be freely chosen by anyone trying to fake it. For a beginner, this means that tokens or contracts built on Kaspa covenants carry a stronger on-chain guarantee: fraudulent covenant assets cannot be quietly conjured into existence on the network.