Thesis

Logs are a patch. Sealed records are the fix.

Logs were built so engineers could debug software. Agents that approve, pay and send need something else: a record per decision, sealed when it's made, that someone outside can check.