Audit log

An append-only log of every mutating action:

• Create/update/delete of dashboards, rules, channels, silences
• Login/logout, 2FA enable/disable
• API-key creation/revoke
• Member invite/remove

Record structure

{org_id, user_id, actor_email, action, resource_type, resource_id, metadata, ip, created_at}

ip is a Postgres INET type, validated on insert.

Viewing

/app/audit — filters by action / resource_type / user / period + CSV export.