Agent transcripts on disk aren't evidence. Here are the cryptographic primitives needed to make a Claude Code or Codex CLI session verifiable off-host.