they sign a version of the replaceable events. so in theory you could keep making new replacement events after signing but it wouldn't matter. they signed an old one.

this is basically a proof of concept. a robust app would have features around exactly what you're talking about