Every sign-in attempt is recorded in an append-only, hash-chained log. Logs cannot be edited or deleted — the database itself blocks it, and each entry is cryptographically linked to the previous one, so any tampering is detected instantly.