A hash chain makes a log tamper-evident, not tamper-proof: someone who can rewrite the whole file can recompute the chain. Signed checkpoints stored elsewhere close that gap.
Hash chain
Each record stores the hash of the previous one, so any edit, deletion or reorder breaks every later link.