Every money move leaves a trail. Global audit log · queryable, append-only, ring-buffer-resilient.

§22 P12 surface. iter7 wired audit_log.emit() into wallet pair, quote pricing, subcard issue, and subcard charge. Supabase RLS pins each row to the authoring user_handle (JWT sub); when the Supabase breaker opens, the in-process ring buffer (cap 4096) holds writes so no event is silently lost. The storage_mode chip below tells you which path is live right now.