Module audit 

The audit stream: an append-only record of who did what — every A2A call, every principal-driven tool/command, config reloads, restores, store conflicts, and kills. Each event is {ts, principal, role, action, target, outcome, request_id, trace, instance}, emitted to the configured sinks: log (a closed-vocabulary audit log line) and/or store (a durable, append-only Kind::Audit record, ULID-keyed — never CAS’d, never listed, so it cannot be rewritten). Audit is security telemetry: it answers “why did the agent do that, and on whose authority?”.