Audit log

Immutable record of all flag changes, approvals, and agent control events.