Audit trail

The audit log is the answer to who changed what and why. Each row is one field on one record: the time to the second, the admin who did it, the action, the target with a link to the record, the old value moving to the new value, and the reason. A single save that changed three fields writes three rows at the same second, so the log reads as changes rather than as a vague event.

It is append-only, and that is enforced rather than promised. Nothing on this screen can be edited or removed by anybody, including the owner, and the records that corrections are made against are themselves append-only. A mistake is fixed by adding a correction that is itself logged, not by reaching back and quietly rewriting the past.

The actions it covers are the ones that matter to trust: corrections to a wash, hiding, showing and adding a photo, edits to a customer or a plate, subscription changes, employee creation, deactivation and updates, PIN resets, device approvals and the creation of an admin. Currency values are shown as money, so a corrected price reads as an amount rather than a raw integer, and a plate or a phone number is left exactly as it was stored.

The log is searchable by plate, mobile or wash number and filterable by action, so a dispute over one car, or a question about who approved a device last month, is a search rather than a scroll. For an operator that has to answer to a society, an owner or itself, the value is that the answer is already written down.