Audit log

Every sensitive action across the tenant — refunds, royalty approvals, attendance corrections, role changes, exports and AI usage. The trail is append-only and cannot be edited or deleted.