AI incidents

Separate from the general audit log — own retention, access role, and notification flows.

No incidents logged.