Audit & consents

Every sensitive action is logged. Each consent row is an immutable record of what the user accepted, when, and from where.