Skip to main content

Audit log

Status: ⚠️ Compliance · 🧩 Needs SDK

Scope​

The money ledger already records all token flows (see Money & Envelopes). The audit log covers non-financial events: role changes, member invites/removals, feature-flag toggles, billing changes, and admin config edits. Append-only; entries cannot be modified. Surfaced in Admin for owner/admin review.

Open questions​

  • Who can view the audit log — admins only, or owners only?
  • What is the retention period and is there a UI to export it?
  • Should the audit log be stored in Supabase (same DB) or a separate append-only store?
  • Do failed permission attempts (e.g. child tries to access Admin) get logged?

Relationship​

Admin — audit log surface lives inside the Admin area.