An append-only audit trail whose gaps are DETECTABLE.
An audit log you can silently delete from is decoration. Most are. The property that matters is not "it records" but "a missing record is visible".
pip install awdit
Write one sensitive action to it and then try to remove the record.
Pairing is composition, never dependency โ awdit installs and runs on its own.
Every brick below is live, drawn from that repository's own published manifest.