Can anyone elaborate on how this protects against tampering? It sounds like you can't actually look at the LOCKSS copies unless the "live" source is down. So long as the single "live" tampered copy doesn't go down it doesn't sound like it offers any protection.