Proof, not content. This append-only log records that an item was processed and when it was forgotten — never the email content, the summary, or any key.