Audit log

Platform control-plane actions — tenant create/update, logins, promotions.