Structured audit record of every enforcement decision: request risk score, model used, policy controls triggered, trust state at decision time, and enforcement outcome.