Browser-based Key Transparency demo — append-only authenticated map, IETF KEYTRANS. E2EE answers "can anyone read this?" — not "whose key did I encrypt to?" Watch a server equivocate, then build the Merkle consistency proofs and gossip that make the lie findable. The missing layer under X3DH, Double Ratchet, and MLS. No backends. No simulated math.