Nothing about a child ever quietly disappears.

Every record carries its author, every edit carries its editor, and role-based access ensures only authorized adults can touch a child's profile.

UTC timestamps are recorded server-side at ingestion. Local timezones are presented in the UI but the underlying log is unambiguous.

Before/after snapshots are captured so any change can be reviewed, explained, or reverted — observation by observation.

Every artifact is tagged as human, AI-assisted, or AI-generated. There is never ambiguity about who said what.

Reports, summaries, and digital twin snapshots are versioned. Parents and schools can compare any two points in time.

Audit logs are retained per applicable law, scoped to the child's circle of care, and exportable on request.

Logs are append-only at the database level and protected by row-level security. Edits create new records; nothing is overwritten silently.