Tamper-evident flight recorder

Each record's hash seals the one before it. Edit any field, the chain breaks from there down, and the anchored root stops matching.