One book, and it cannot be edited.

Every movement writes itself into an append-only register the moment it happens: a delivery posted, a sale at the counter, a gun taken into custody, a guard timed in on a client's gate. There is no edit and no delete anywhere in the application. A correction is a new entry that names you and points at the original, and both lines stay forever.