Audit

Every mutation, newest first. Configuration snapshots are redacted before they are recorded — an audit trail is never where a credential leaks.