daily operating surface
Every Bucket edit, rule mutation, approval, applied action, and alert delivery state change. The ledger never deletes.