Audit log

Enforcement events — denials, mid-flight kills, and revocations, tailed live from the system.governance_log table. The forensic record of what users reach for and where policy pushed back.