Audit trail

Every tool call, allowed or denied, with the scope it ran under. Denials are the interesting rows: a cross-account attempt, or a prompt trying to talk its way past the data layer, shows up here.