[gepetto]

I like both ideas.

I don't understand why the person being attacked doesn't get a log. If it it for space reasons, I'm sure a system can be developed where only the last 25 attack logs are being kept. Also if a person goes inactive, it looses spots from the attack logs queue. So it keeps 25 - (days_of_inactivity) logs. After 25 days of inactivity, all logs are erased. Same for the bank records.

OTOH HDDs are cheap; keep all data, it's not gonna make a big dent in the space already occupied. Just delete the data after 25 days of inactivity.

25 = arbitrary number.