A record of every sensitive change, with what it was before and after
Each sensitive action is written down with its before and after values. Nobody can change or remove those records from inside the application, not even an administrator.
In every edition