A durable record of what happened, who or what did it, what data was used, and when — required before any agent touches regulated records.