Verifiable undo and receipts

gx's undo demo ships the exact commit a reader would need to falsify it

The post names left-pad at 2fca615, 11 tracked files and 44,229 bytes, and lists the four outcomes that would sink the claim, which is a harder standard than most tool demos set for themselves.