Skip to content

Help centre

The safety net

The trash, the 30-day window, the audit log, and getting your data back out.

What is not here

Two different kinds of missing, and they are worth telling apart. One is a feature that does not exist, which no amount of writing would fix. The other is a feature that ships and that we have not documented, which is our backlog and nobody else’s problem to excuse.

Reading the audit trailNot written
The audit screen and hourly tamper-evidence route ship. The route refuses to seal anything until the platform operator supplies an audit signing key or keyring and AUDIT_CHAIN_DATABASE_URL with the required owner access; source code cannot prove those deployment credentials are installed, so the article must not blur scheduled into operating.

All help categories