Revision #51

## Audit Log

Every administrative and moderation action is recorded in the append-only audit log at `/admin/audit`.

### What Gets Logged

- User role changes (promotions, demotions)
- User suspensions, bans, shadow bans
- Content deletions (posts, threads, files)
- Forum creation, modification, deletion
- Configuration changes
- Moderator assignments and removals
- Feature flag toggles
- Branding changes
- Security actions (IP bans, MFA clears)

### Log Fields

Each entry records:

- **Timestamp** — when the action occurred
- **Actor** — which admin/moderator performed it
- **Action** — what was done (structured action code like `forum.settings_updated`)
- **Detail** — human-readable description
- **IP address** — the actor's IP at the time

### Searching the Log

Filter by:
- Action type
- Actor (admin username)
- Date range
- Free-text search in details

### Integrity

The audit log is **append-only**. Records cannot be updated or deleted. This ensures a tamper-evident trail of all administrative actions.

### CSV Export

Export filtered results as CSV for external analysis or compliance reporting.