hash-chained signed event log

[rob-9]

every event signed by emitter and co-signed by platform. sha-256 of (prev_hash + payload) stored per row. tamper detection on read.