Audit chain

Hash-linked rows. Tamper flips one action in memory and re-hashes. It does not write the break. An advisor row is a reason, not a debit.