Append-only. One record per attempted remediation — including the ones policy refused, which is what makes this credible to a real operations team. A denied action is exactly as traceable as a successful one.
Nothing yet. Drive the MCP server and every attempt will land here.