Audit log

Dual-location HIPAA accounting-of-disclosures record. Passphrases are stored only as salted SHA-256 hashes — never in plaintext.