Attested append-only memory: making adversaries stick to their word