A consent flag says yes. It can't say yes to what.
Bind the decision to a hash of the notice and an edited banner re-asks on its own, no version bump needed, and the log exports as a chain you can verify instead of trust. In an audit, what your consent record can actually prove is the part that counts.
https://shipmindlabs.com/c/83c16653