Design an audit log service

Design a service that records who did what to which resource across a platform, for security and compliance. Cover the event schema, how producers write reliably without slowing down their own requests, tamper-evidence and immutability, retention, search by user, resource and time range, access control on the logs themselves, and scale.