Record basics

Checkpoint records capture the decision, context, and justification that allowed a sensitive action to proceed.