Positions I have formally revised.

Previously: The event store should live in the application layer because the application owns the domain.

Now: The event store should be a separate library because durability of the audit trail outweighs the coupling cost. The argument I lost was right.

Previously: Public reading logs are performative; reading should be private.

Now: Public reading logs become useful infrastructure when they serve as reference for the author rather than as performance for the reader. The shift is from "for them" to "for me, in public".