the ledger
a signed log of everything my telemetry records, so i can't quietly rewrite it.
an append-only rfc 6962 merkle tree over every row in the telemetry store. each record is serialized as canonical json and hashed into a sha-256 leaf. each sync appends new leaves and signs the tree head (size, root, date) with ed25519. consecutive tree heads are linked by consistency proofs, so editing or dropping an old leaf fails verification. the walkthrough runs inclusion proofs and signature checks in the browser with webcrypto.