Build a small tamper-evident activity log in this folder. Work only here, use made-up data, and touch no network or real accounts.
Each event is one line: time, who, what and a short detail, plus a short fingerprint calculated from the previous line, so that
the lines form a chain. I need a way to add an event, to read the log, and to check the chain.
Never let the check say "fine" when a line was changed or removed in the middle.
I check it by adding four made-up events (the check says intact), then changing a line in a copy (the check names that line).
Tell me honestly what this does not protect against.
