Break the chain — attempts and results

[bkuan001]

Standing challenge: try to tamper with a chain in a way halo verify doesn't catch.

Easiest way in: run uvx --from halo-record halo demo --serve, open one of the generated .jsonl files, and delete a line, edit a value, or reorder records. Reload the report or run halo verify — it should flag the break every time.

If you find a modification the verifier misses, that's a real finding: post it here (or see SECURITY.md if it's something an attacker shouldn't read first). The threat model — what the chain does and doesn't defend against — is documented there too; worth reading before you start, since "the operator can omit records entirely" is a known limitation by design (see the integrity-vs-completeness section of the README).

Attempts that didn't work are worth posting too — a public record of what's been tried is half the value.