Audit trail

Every read, check, plan, policy denial, email and human decision. Each entry's hash covers the one before it, so an edit anywhere breaks the chain.