Hash-chained, append-only, tamper-evident. Daily root hashes published publicly.
From signed contract to your first agent live, no extra fee, no migration project.