Audit log

What is recorded and how to read it.

Every request that changes something is written to the audit log with the user, the method, the path, the outcome and the time. Sign-ins, failed sign-ins and rate-limit blocks are recorded with the source address. Automated callers (the worker, the Telegram bot, the mail poller, scheduled jobs) are named as the caller and the advisor they acted for, so a filing made by email reply shows the advisor, not the mailbox.

Reading it

The Audit tab (administrator only) lists entries newest first and can be filtered by user and path. Export it when a compliance officer or the regulator asks for evidence.

Together with

The Activity feed holds the exact text of every drafted, approved, rejected and sent communication; the advice registers hold every version of every document. The three together answer "who did what, when, and what did the client receive".