Append-only, org-wide. Request events, settings, users, keys, files — who did what, when. Secrets are redacted before they can land here.