Oracle log

Every reading the oracle takes (synthetic monitor pings, public status feeds, the demo simulator) is hashed with its predecessor into an append-only chain: sha256(reading + prev_hash). Settlements reference the exact reading that triggered them. Tamper with history and the chain breaks.