The Honest Way to Prove an Audit Log Was Not Altered, Offline

Why we build tamper-evidence instead of promising the impossible, and how a signed off-box checkpoint turns a hash chain into proof you can trust without a network.

You prove it with a signature an attacker cannot forge, anchored outside the ledger. A hash chain shows the record is internally consistent. A checkpoint (genesis, length, head hash, Merkle root) signed by an Ed25519 key and held off-box lets a verifier confirm the live chain is exactly the one that was attested, and no older. No internet required.

---

Originally published on mickai.co.uk. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.