Every state change is hashed onto a chain. The public /api/public/audit/verify endpoint validates any pack in the browser — no login, no Lovable account. If anyone with a service-role key altered a payload, the endpoint returns 'brokenAt' and a broken entry id. We do not re-seal a broken chain.