Activity Log

Every action, attributed and searchable, newest first (25 per page).

What each row shows

• Date of the event.
• Actor badge — admin blue / owner teal / sub user orange / system gray — plus the resolved name (admin username, client name, sub-user name).
• Action — request, cancel, approve, extend, offer, export, twofactor, finance, complete, settings, and more.
• Detail — human-readable text, e.g. Days 15 > 30.
• IP — request address (REMOTE_ADDR only; forwarded headers are ignored) with the browser user-agent beneath it (full string on hover). System/cron entries store empty.

Settings audit

Each save writes one entry naming every changed value (Finance Guard warn > block; Min Credit 0 > 20.00), or Settings saved (no changes). Secrets are masked as (set) / (none) — never logged in readable form.

Retention & export

Keep-days come from Settings (0 = forever), enforced by the daily cron. The dashboard trend charts read this log, so long retention means long history. Filtered views can leave via the dashboard/request/survey CSV exports.