The hash chain in Git itself is effectively immutable, but the names on top of it, like branches and tags, can't be trusted, and that's what we're basing releas

The hash chain in Git itself is effectively immutable, but the names on top of it, like branches and tags, can't be trusted, and that's what we're basing releases on. Obviously the point of a branch is that it will change, but expectations around tags don't meet reality, and there currently isn't really a way to state those expectations other than tossing out tags entirely. It seems an immutable ledger could help in this case to detect tag changes, and that's where people start throwing around blockchain as an answer, but there probably is something simpler and less entangled with the crypto subculture...