Audit Trail
Every read, merge, and decision is signed and hash-chained. Full DPDP audit console next sprint.