Audit Trail

Every autonomy change for a pair — who requested it, who decided it, and why — captured immutably.
Requires auditor or admin role