So I think that, here, the 2nd-to-last question bubble in the flow chart is the key one. Because the question you're circling around is, "How do we verify that records are written by specific people?"

If you can centralize the records management, then you don't have a problem deciding who should own the record store. At that point, good old-fashioned authentication will solve your problem.

If you can't centralize records management, then things get trickier. But I think the trickiest part would still be to come up with a non-contrived logistics scenario where there isn't an obvious custodian you can put in charge of a centralized record.