Console
Evidence-gated. Nothing executes without approval.
Audit
Every step, newest first. Filter to one run, or scan the full trail across every incident.