Every decision — allowed or refused — is hashed, Merkle-batched, and anchored on-chain. An auditor verifies the record against public commitments, without trusting Regent or the operator.
A vendor-held log proves what the vendor chose to keep. When the question is "was this record altered after the fact", trust-me is not an answer a regulator accepts. Tamper-evidence has to be structural.