Audit trail
Every write, whoever made it — the browser, the REST API and the MCP endpoint all land here. Append-only: entries are never edited or removed from this screen.
| When (UTC) | Actor | Action | Entity | Detail |
|---|---|---|---|---|
| 2026-11-11 16:33:25 |
admin@helpora.app | Export | audit_log | {"rows":8} |
| 2026-11-10 01:02:58 |
admin@helpora.app | Export | case #11 | {"code":"DCR4KE9MJ7","format":"pdf"} |
| 2026-11-09 03:08:27 |
admin@helpora.app | Export | case #10 | {"code":"YUZRWMBVVH","format":"pdf"} |
| 2026-11-07 17:51:27 |
admin@helpora.app | Export | case #24 | {"code":"HQUZV46AQM","format":"pdf"} |
| 2026-11-07 17:47:06 |
admin@helpora.app | Export | case #26 | {"code":"ZCGKRGEZYR","format":"pdf"} |
| 2026-11-07 17:29:09 |
admin@helpora.app | Export | case #37 | {"code":"PPKV5UTSTZ","format":"pdf"} |
| 2026-11-07 17:25:00 |
admin@helpora.app | Export | case #16 | {"code":"CBZFVHK3UJ","format":"pdf"} |
| 2026-11-07 17:11:22 |
admin@helpora.app | Export | case #33 | {"code":"KKX2SD3QJR","format":"pdf"} |
| 2026-11-07 17:07:05 |
admin@helpora.app | Export | case #40 | {"code":"XZGZ56XA4Z","format":"pdf"} |
Secrets never reach this table: a requester's passphrase hash, OIDC client secrets, and the backup and calendar tokens are stripped before an entry is written. Request content is never copied here either — an audit row records that a message was posted, not what it said. A purge is recorded as a count for the same reason: naming what was purged would undo the purge.