Audit log

Append-only trail of every write across the platform — enforced by Postgres triggers (migration 00040).