export interface AuditEntry { timestamp: string; traceId: string; service: string; action: string; who: string; what: string; why: string; result: 'approved' | 'denied' | 'error'; details?: Record; }