>but you can't change an existing commit - the hash would be wrong. True - however as long as nobody ever saw that commit, nobody will know. So the only way a

>but you can't change an existing commit - the hash would be wrong. True - however as long as nobody ever saw that commit, nobody will know. So the only way a git log could ever constitute a proof would be that you immediately push to a tamper-proof audit system right after your commit.