Every action, append‑only and tamper‑evident. This is your SB 1120 / HIPAA record — it can't be edited or deleted, and the hash chain is re‑verified on every load. Contains no PHI.