Key Transparency · append-only authenticated map · IETF KEYTRANS
Runs a real key directory that lies — it hands Alice a substituted key for Bob while showing Carol the truth — then builds the Merkle log, consistency proofs, and gossip that turn the lie into evidence.