Every action is recorded against the signed-in officer, with its purpose and legal basis, in a tamper-evident audit ledger.