The ledger captures the permission event.
A useful ledger entry includes the old boundary, new boundary, source correction, affected scope, escalation lane, approver, timestamp, and expiration. It is not a transcript dump. It is a structured record of how agent autonomy changed.