Northwind Insurance

Audit log

Every administrative action, with who did it and why. Append-only: entries are never edited or deleted, which is the only property that makes them evidence.

What is recorded, and what is not

Key creation, rotation and revocation, plan and credit changes, member and role changes, guardrail edits, and every action a BSV Association operator takes in admin mode. Read access is not logged: this is a record of changes, not of who looked at what. The actor’s email is stored on the row rather than joined from the user table, so an entry still reads correctly years later after a rename or a deletion.