The pager goes off at 2 a.m. A production credential was used, but no one knows by whom. You scroll logs, replay sessions, and swear under your breath. The trail is vague, incomplete, and weeks of audit pain loom ahead. This is exactly the mess that proof-of-non-access evidence and