Observability & Trace

Runtime MUST:

• Emit trace spans per execution step

• Maintain append-only audit logs

• Record policy decisions

• Record lease events

• Record revocations and migrations

• Support retention policies

Hash-chaining SHOULD be supported for tamper-evident audit.

Integrity breaks SHOULD trigger alerts.