Every verdict is logged and can be replayed

Each certify and reconcile call in this walkthrough appended its verdict to a hash-chained log, except runs with a planted bug. Replay recomputes a stored verdict from its stored inputs and rulebook, then compares the result byte for byte.

The chain

Verifying every hash in the decision log.

Replay a verdict

Reading the log.

The S3 anchor

The deployed API writes the chain head to an S3 bucket with Object Lock, so a later rewrite of the log no longer matches the anchor.

Comparing the chain head with the S3 anchor.