Audit log

One row per tool call, written before the call is answered: who it was for, what was asked, what this system decided, how it ended. Digests and sizes only — no argument, body or credential is ever stored (ADR-0030).