Audit streams

Each stream is an append-only hash chain. Anything written outside the append path is caught the next time it's verified.