The Merge Is the Trust Boundary: Re-Derive as Untrusted

A single-writer knowledge store with a hash-chained audit log has a clean story: every governance event folds the previous entry's hash into its own, so an in-place edit breaks the chain and verify ca