/what-this-proves
Tamper-evident ordering.
Changing a committed header breaks its hash and every later predecessor link. In network-consensus mode, four separate validators independently execute each transition and three matching signed votes are required.