Audit Log

Configuration audit

Append-only · hash-chaining/WORM deferred · never logs secrets