> All hashes and public keys are cached by the client[s]
The cache of a hosted web client can easily be manipulated by an instance admin. But if clients are independent, this might be a good solution (depends on your security requirements).
> public auditing
Bluesky's [did:plc](https://github.com/did-method-plc/did-method-plc ) is a good example of this. It's a centralized server but anyone can view and audit the ledger.
