Audit Log

Append-only record of every run, grade, escalation and decision — retained 7 years. Any certificate is reproducible from stored versions.