Recall trace forensics. Read-only. Source: trace.jsonl
Endpoints: GET /audit/recalls, GET /audit/recall/{id}, GET /audit/memory/{id}/access, GET /audit/user/{id}/activity.