Every Kastra decision is signed and chained. Evidence is queryable, exportable, and suitable for SOC 2, HIPAA, and EU AI Act compliance.