Every action, signed.

Each payment, verdict, approval, freeze, key and rule change is written to a hash chain and signed by the engine's audit key. Anyone can check that nothing was edited or removed.