Decisions are append-only, sampled for display and kept thirteen months

Context

Audit value and display traffic require different recording policies.

Decision

Select authorization, transactional and indeterminate answers for recording and sample other display answers at a configurable rate, with one in twenty as the default.

Alternatives Considered

Persist every display answer: High-volume page reads would produce substantial repetitive history.

Apply the ordinary workspace row policy to history: Pre-workspace authorization reads need the documented policy exemption.

Consequences

Ordinary application access is insert and read only. History queries explicitly constrain the workspace. Restricted purge and retention remove rows. Display inserts are deferred and can be lost; the SQL-only check inserts no history.