Audit trail

VIBE/CHAT_LOG.md

@@ -1,5 +1,11 @@
 # Chat Log
 
+### User
+Fix SA-015: Some destructive and administrative operations lack audit logging.
+
+### Assistant outcome
+Added an append-only `security_audit_events` table and audit service. Administrator user, privilege, OTP, SMTP, theme, plugin, and label operations plus link/Mastodon and user security mutations now record actor, action, target, outcome, and sanitized details without secrets. Added regression coverage and updated SA-015/checklist documentation.
+
 ### User
 Solve SA-010: Avatar validation trusts the client MIME type.
 

VIBE/PROMPTS.md

@@ -189,6 +189,7 @@
 183. Address SA-007 and use linklog.example.com as the default LINKLOG_PUBLIC_URL.
 184. Run full backend and frontend test suites.
 185. Solve SA-010: Avatar validation trusts the client MIME type.
+186. Fix SA-015: Some destructive and administrative operations lack audit logging.
 
 ## Future entries