A new audit log for admin actions

Settings now has an Audit log tab. It lists sensitive actions taken across your organization (removing a member, changing someone's role, revoking an API key, deleting a conversation, promoting or archiving an agent version, adding, editing, or removing a connector, and creating, editing, or archiving an instruction block), each with who did it, when, and what it targeted. Scheduled data-retention purges show up too, attributed to the system.

Filter by action, actor, site, or date range, and export the filtered results to CSV. The log is read-only: nothing here can be edited or deleted, including by the people whose actions it records.

Only admins with the new Audit log permission see this tab. It's hidden from anyone else's Settings navigation.