Audit log

Immutable record of every configuration change: actor, before/after, timestamp (ADM-02).