No CCA story, and the state hash looks like a very convenient oracle. The part nobody should gloss over is that the selector is plaintext-driven, so the scheme’s own walk becomes part of the surface area, not some free hardness source. Calling that a fiber bundle doesn’t make the hash-chain dependency any less awkward.