Hash-chained audit log architecture, retention, integrity verification
13.1 Purpose and Distinction from Operational Logging This chapter specifies the evidentiary tier...