Creates an aggregate-local domain event recorder.

The returned interface intentionally hides its mutable backing collection. Use it as an aggregate field; after an application confirms its own persistence and dispatch policy, it can remove individual facts or clear the recorder.