10. security considerations

hash-linked log structure prevents retroactive tampering

Bitcoin anchoring provides immutability

multi-signature approvals prevent unilateral changes

optional zero-knowledge proofs maintain privacy

protocol does not itself hold private keys for user funds

no modification to Bitcoin consensus