Every MCP call, gated write, and deploy, captured immutably: who (principal), what (tool), when (CT), and the result. Filter, search, and export for compliance review.