Redacted excerpt; full evidence withheld.

$ cd <host-path> && git log -1 --format=%H 2>/dev/null; ls -la; cat README.md 2>/dev/null | head -200
exit: 0
but *when* was it sealed? A server announcing
its own dates is the suspect writing its own report. And the threat model
had one open gap: an operator holding the private key could **regenerate the
whole chain** with valid signatures.

Anchoring closes it — with **witnesses you choose, in layers**
([ADR 006/008/009](docs/ADRs.md)):

- **Qualified eIDAS TSAs** (Universign, Certigna…) — a qualified timestamp
  carries a *legal presumption* (art. 41): the date and the integrity of the
[excerpt truncated]