Administrative actions that change account or transaction state are not recorded in an audit log, making it hard to reconstruct what happened during a support investigation or dispute.
Proposal: Add an append-only audit log entry for all admin-triggered state transitions, capturing actor, action, and timestamp.
Administrative actions that change account or transaction state are not recorded in an audit log, making it hard to reconstruct what happened during a support investigation or dispute.
Proposal: Add an append-only audit log entry for all admin-triggered state transitions, capturing actor, action, and timestamp.