How the audit trail proves nothing was changed
Every record is chained to the one before it with a SHA-256 hash. Altering an old record breaks every hash after it.
At intervals Mati signs the chain head as an anchor. A verification officer can add an independent countersignature.
Anyone can check an anchor at its public address without signing in.
In a demo, anchors signed with a built-in key are marked simulated. A production deployment signs with its own key.