Write-once records

Important records (decoy sign-in attempts, text-message consent, account freezes, payment-check decisions, X Money approvals, passkey changes) are copied to a Cloudflare R2 bucket with a bucket lock rule: objects under worm/ can't be deleted or overwritten (retention: indefinite). Each record is also listed in a SHA-256 hash-chained manifest, so a missing or changed record shows up.

This is 17a-4-style write-once storage. It is not certified under SEC Rule 17a-4 and no outside firm has checked it. A Cloudflare account administrator could still remove the lock rule itself.

Manifest: intact, 1 records, latest hash 623f04d562eb850e….