Message integrity
- Messages are append-only. No edit or delete after send.
- Server-side timestamps for sent, delivered, and read receipts
- SHA-256 hash chain links each message to the previous one
- Exports include verification digest and public check URL