Produce the evidence regulators actually accept — audit-ready model cards and signed, immutable logs that tie every output to its source, model version, and policy.