Every pick sealed before kickoff. Every edit on the record.
Timestamps come from the server, not from the tipster's computer. After kickoff the database itself refuses any change to a pick.
Every post, edit, withdrawal and settlement is a new event. Events cannot be updated or deleted.
Each event's SHA-256 covers the previous one, so a quiet rewrite anywhere breaks every fingerprint after it.