Everything here is derived from the append-only ledger — no running totals, nothing editable by hand.
