Clinical data has two opposite jobs: immutable submission records and fast, flexible exploration. A three-layer S3 architecture with Object Lock, narrow IAM roles, and promotion manifests serves both, with the audit trail as a byproduct.