Status: IN
CloudTrail log file integrity validation is disabled by default and must be explicitly enabled with `--enable-log-file-validation`; disabling it breaks the digest chain after one hour.
Source: entries/2026/03/12/cli-latest-reference-cloudtrail-create-trailhtml.md