Immutable, org-wide record of every significant action — auth, control, configuration, access, inventory, alerts. Filter, search, export for compliance.