The rules that make the record worth something: dual signatures, INSERT-only honesty layers, public verification, and refusals on the chain.