An audit log an attacker can edit is not evidence — it is a liability with a timestamp.
Assume the Auditor Is Compromised
We build every event ledger to survive hostile access: append-only, cryptographically chained, and independently verifiable. Tampering does not corrupt the record — it announces itself.