Who did what, to which version, and when.

The audit log records tenant actions and content digests. It deliberately excludes access tokens, raw provider payloads and generated narrative.