Invented · filters Not built, deliberately: a severity axis (nothing in the model carries one, and inventing it ranks events nobody has ranked) and links from other admin screens into a pre-filtered ledger — the person record declined to show a person’s decision history rather than answer §13’s unstated inverse, and a “view in audit” link would re-answer it by navigation. Pivots here stay inside the ledger.

Invented · reason codes Times are UTC from synchronized clocks: NFR-06 makes time a requirement, not a display preference. The person column is the MOD Person ID, the durable key an audit trail must survive renames and transfers on.

Invented · one ledger Three categories are seeded rather than produced: there is no sign-in in this prototype, break-glass is drawn nowhere, and the credential half of recovery has no flow. They are in the vocabulary because a ledger missing a category looks exactly like a portfolio that never produced one.

Tension · FR-13