Structured logging — append-only CSV logging for every pipeline stage, with user-value sanitization (printable ASCII only, length-capped, newline-escaped) to prevent log injection and CSV injection.