id: K8
number: 8
title: Audit Ledger
layer: kernel
clauses:
  - id: K8.1
    title: One ledger for votes and money
    text: >-
      Every governance event and every movement of pooled funds is
      recorded as an entry in a single public, append-only,
      hash-chained ledger. Governance events include at least citizen
      registration and status changes, key registrations and rotations,
      proposal lifecycle transitions, eligibility snapshots, ballots,
      tallies, gate verdicts, releases, and fork registrations.
  - id: K8.2
    title: Chain integrity
    text: >-
      Each ledger entry carries a sequence number, a timestamp, an event
      type, a payload, the hash of the previous entry, and its own hash
      over the canonical form of all preceding fields. The first entry is
      a genesis entry. Anyone must be able to verify the full chain with
      public tooling.
  - id: K8.3
    title: No entry, no event
    text: >-
      A governance action without a corresponding ledger entry is void. A
      payment from pooled funds without a corresponding ledger entry is
      unauthorized. Where the ledger and any other record disagree, the
      ledger controls.
  - id: K8.4
    title: Append only
    text: >-
      Ledger entries are never edited or deleted. An erroneous entry is
      corrected by a subsequent correction entry referencing it.