Every covenant leaves a proof

Each record seals who / what / when / why / how, links to the one before it, and is tamper-evident. Replay walks the chain backwards from any point.