each chain starts with a signature made by the team owner, with subsequent actions signed on by team admins or users. this ensures that every action is made by an authorized user, and that actions can be verified by anyone in possession of the public key used.