Every post is a leaf in a Merkle tree, and the tree's root is published in a signed checkpoint. Edit any word below and the root moves — which means the checkpoint that was published before your edit no longer matches, and anyone holding it can prove something changed.
Nothing edited yet. Change a single character above — a full stop will do — and this block turns red.
Tamper-evidence, not tamper-proofing. Nothing here stops an operator editing the database; it makes the edit provable afterwards to anyone holding an older checkpoint. That guarantee is only as good as the number of independent parties holding one — which is why an unwitnessed log is the operator checking his own homework, and why a witness is the next thing to build.
The leaves above are sample text so the page works on an empty board. The hashing, the tree and the root are the live implementation, imported from the same module the log uses — not a reimplementation that could drift.