Audit log infrastructure — versioned envelope with HMAC-hashed
actor / target identifiers and an in-store key history that
survives right-to-be-forgotten rotations.
Trust-Task primitive — every wire op in the workspace binds to a
versioned Trust Task identifier published on
trusttasks.org. See spec §3-L and §16 of
docs/05-design-notes/vtc-mvp.md for the full design rationale.