Audit trail

Every governed query, hash-chained so tampering is detectable.