Audit log

Append-only. Who approved, rejected or shared what, and when. Exportable for compliance review.