Stop Trusting the App: Enforcing Append-Only at the Database Layer

Most "audit logs" are append-only by convention, not by enforcement. The application inserts a row...