Two kinds of event, never confused. The platform's are enumerated and describe Resources; yours are whatever your domain needs, and the owner is always the query key.
One store for every Resource
All 23 types persist through the same store — a JSON file per resource on disk, or one Postgres table — and read back through GET /resources.
Your audit trail is just events
A consumer records every tool call as an app event keyed by trace id. “What happened to my request?” is one query.