How we build identity, sealing, and audit internals — with the trade-offs left in.
Most audit trails are rows in a table the operator can edit. That gap stays invisible until the day it matters — and by then the log is all anyone has.