---
status: accepted
---

# Audit history across every module

Audit history is required throughout the MVP, including enrollment, financial clearance, curriculum and grading setup, assessments and scores, grade finalization and corrections, transfer credits, documents and learning materials, and accounts and permissions. Coverage includes record creation, changes and deletion, approvals and other state changes, security events, and access to sensitive records, downloads, and exports. This preserves evidence from the first release because a reliable history cannot be reconstructed after records change; it adds storage and write overhead.

Entries record the actor or background process, action and outcome, affected record and relevant branch, department or class context, timestamp, before-and-after field values when applicable, and the reason for actions that require one. Secrets such as passwords and authentication tokens are excluded; document events identify the file without duplicating its contents. Committed business changes and their audit entries must be recorded atomically; denied or failed attempts are recorded independently of rolled-back changes.

Audit records are stored in the database. The MVP has no audit-log viewing screens or application-user access to browse the logs. History is append-only through the application, including for school administrators, and a correction creates another event rather than replacing the prior history. Retention periods remain an open decision.