The Audit log page

Every sensitive action across the app (domain onboarding/deactivation, policy changes, user invites/role changes/MFA resets, allowlist edits, retention pruning) writes an entry here. This page is read-only — it exists to close the governance loop, not to take action from.