Tamper-evident receipt chains

Giving one deterministic layer the only write privilege demotes the model to a proposer

An eldercare agent published at a live URL puts its two hard rules in Python instead of prompts, and the demo tests them by calling the send function directly, which is the only version of that claim a reader can check.