Event logs make systems legible because they preserve order. A snapshot tells you what is true. A log tells you how it became true.