Component: Audit Log
What it is: an append-only decision log (PostgreSQL) that records every allow/deny with the
acting agent, the nested act chain, the target, the data class, and the policy version.
What it does: commits the row before the enforcement point is told the outcome, and links each hop to its parent at write time so a full chain never needs to be walked at query time.
Why committed before responding, specifically: this closes the one race that would let a privileged action happen without a trustworthy record of it — if the commit fails, the call is treated as denied rather than dispatched with a promise to log it later. See The delegation-chain audit model for what this buys beyond a normal log.