Audit readiness is an evidence problem, not a policy problem. Written rules are insufficient without systemic proof of execution. Minimisation and auditability can coexist. Retaining only what is ...