Public ledger

Every stone, signed.

Each ledger row is HMAC-signed against the previous row's hash. The chain is replayable end‑to‑end; tampering with any past row breaks every row that follows.