Audit log — what gets recorded

Every create, update and delete on core entities is captured with actor, timestamp, and a before/after diff. The log is append-only.