Verifiable audit
The audit log is a hash chain. Every page you read carries a verification verdict, and a break comes back with the records either side of it.
Export it as JSON, CSV, OCSF or CEF for a SIEM — a single-tenant export carries the chain verdict so the recipient can recompute it.