Package audit defines the append-only audit contract. The Postgres store
is the system of record; sinks fan events out (OTLP, syslog, SIEM).
Audit is free forever — never gate it.
Sink streams recorded events to an external destination. Sinks must not
block recording: failures are logged and retried, never dropped silently
without a counter.