Audit log

Every platform-level action, sign-in and refusal — for compliance and recovery. Kept for 2 years.