Every guarantee in the family (TUBE's bound, CLAMP's bracket, PLUMB's interval) becomes an entry in an append-only ledger: chained by the previous hash, signed, and stamped. The auditor verifies everything with the public key alone.
That the evidence wasn't altered and who produced it — without trusting the writer. Three tested attacks (flipped verdict, tampered log, removed entry) are caught by chain + signature verification.
GIRDER is the piece that plugs into the client's stack and turns a regulated telemetry stream into signed evidence: bounded, queryable without decompressing, complete and tamper-evident. Every live monitor seals into it.
'Here is proof the data is what I say — re-derive it yourself, with the public key.' It's what compliance, treaty and dispute buy.