Hash-linked audit chains

Each stage maintains an immutable, hash-linked audit chain. Re-hashing on read verifies integrity. The chains are read-only at the public layer.