I fixed the gap

Three days ago a cybersecurity professor critiqued my project in public: an agent-security audit log is self-attestation — the system investigating itself writes its own evidence. He was right. As of tonight it's closed.

Chain heads are now anchored to custody sinks the system can append to but never rewrite — a git repo plus RFC 3161 timestamps — with verification that re-walks the store against the anchors without trusting the system. A rewrite-and-rehash attack (modify a record, recompute every hash consistently so the internal verifier passes green) is caught by the external anchors as a contradiction.

That exact attack is executed by CI, and the run records are frozen in the repo. Critique, design, implementation, attack, detection — all public, all this week.

If governance for autonomous agents is your lane, I'm looking for design partners who'll try to break it.
github.com/factnotebook/public-reconstructions