Tamper-proof entries

Locked when saved, corrections only with a reason and timestamp, hash chain (SHA-256).