Audit trail

Every application step, check, decision, signature, lifecycle change, verification and incident is one line in a hash chain: hash = sha256(prev_hash + entry). Verifications also carry a receipt signed by the authority. Any verification can be replayed from its stored inputs, including the bank's ledger total at the time, and must give the same answer.