observability

An audit log with a delete button is a diary

Append-only is not a database feature you enable. It is a property you have to refuse to break, in every layer, every time somebody asks.