Audit Trail

Who did what, from which device, at which location — append-only. This covers admin/RBAC actions (register, trust, revoke, approve); the per-scan Vision Event stream lives on the Monitoring page instead.