| Time | Category | Action | Tenant | Actor | Outcome |
|---|---|---|---|---|---|
| Loading audit log… | |||||
Control Plane · Settings
Audit Log
Immutable, append-only record of state-changing actions across the control plane (CP-F23).
Real (CP-F23): every state-changing action (tenant/migration/subscription/invoice/promotion/partner) automatically writes one immutable record (append-only, no edit/delete). Actor = system in dev (production takes the user from the gateway JWT + IP). Currently covers domain events; full coverage (every create/edit + failure) will add an interceptor.