Admin

Security audit log

Append-only record of every security-sensitive action — authentication, proof verification, rate-limit denials and admin access — with UTC timestamps and actor identity. Rows cannot be edited or deleted, including by the app itself.