What it does: Every finding and every fix becomes a ledger line with a hash chained to the previous one. Re-test a finding: the ledger records the fix as a new line after the finding, and the chain extends. The evidence pack is what the owner hands an auditor or a customer who asks. Notes: The ledger is append-only; nothing is edited or deleted. “Re-test now” in the plugin is a request to the service, not a scan inside WordPress.