Audit log

Every posture-changing event in one stream: triage decisions, connector setup and tests, snapshots, workflow runs, and trust-share links. Entries are append-only and cannot be edited.