Tamper-evident logging on iOS: hash-chained, HMAC-signed audit ledgers

An audit log editable by the host app or anyone with jailbreak filesystem access isn't an audit log. The hash-chain plus HMAC-signature plus off-device-replication pattern, and the real BehaviorGuard AuditLog that implements it.