The tamper-evident hash chain

Every governed action is recorded write-once and cryptographically chained with a SHA-256 rolling hash chain. Change or delete a record and the chain no longer adds up, so quiet edits show. Key points:

• Each entry is cryptographically linked to the one before it; the trail proves itself.
• Deploys, approvals, access changes, and AI actions all land in the same place, ready to export.