Receipt ledger

Every agent action lands here, hash-chained so nothing can be quietly edited. Purchases can be reversed for 5 minutes.