Tamper-evident audit log for B2B SaaS: hash-chained, anchored to Sigstore Rekor and OpenTimestamps, verifiable offline. Claude MCP connector included.