Append-only, public, unauthenticated

Transparency log

Every receipt this service issues has its digest appended here. The structure is what makes it append-only, not our word: an operator who rewrote or removed an entry could not produce a consistency proof between the root they published before and the one they publish after.