Audit log

Who did what in this workspace. Security-relevant events are kept longer than routine edits, and a record outlives the thing it describes — a purged token still has its trail here.