The audit ledger

What gets recorded, and who's ever attributed as the approver.

What gets logged

Every incident — detected, diagnosed, fixed, approved, escalated, or blocked — writes a row to an append-only-in-spirit ledger. Approvals are always attributed to a named human; Caretaker is never recorded as the approver.