Signal registry

When a breach matters, promote it to a Signal. A reviewer approves it into the append-only registry — a compliance-grade record of “did we know, when, and who signed off.”

• Evidence is frozen at detection time, so the record reflects what was true then.
• The registry is append-only — no edits or deletes (returns 405).
• Export to CSV, or download a per-signal PDF compliance certificate.