Immutable wallet_ledger entries per downline user. Deposits, withdrawals, bet settlements, and exposure holds are all auditable with idempotency keys.