> All hashes and public keys are cached by the client[s]
Maybe a public auditing thing like IIRC WhatsApp said they were doing with key transparency as well (but not Signal; their auditors are a permissioned list of Trail of Bits and Cloudflare). But I still don't understand how those work.