An append-only record of security-relevant events: who asked for what, what was decided, and what happened. In MCP, the client and the server each keep their own, because each can only see its own side.