What you can do today
Audit (needs read_audit_log or manage_safe_sport) shows the club's audit
log and the overrides currently in force.
What gets written
More than you might expect, and on purpose:
- Registration decisions, membership changes, role grants and revocations
- Waiver version publishes, policy publishes, club settings changes
- Every override, with who granted it, the reason, and how many uses are left
- Every read of a medical record — the read itself is the event
- Reads of restricted documents — custody and safeguarding paperwork
Two levels, and why
read_audit_log reaches ordinary rows. Safeguarding rows need
read_safeguarding_audit, which the Safe Sport lead holds and the board does
not.
The reason is that the metadata alone discloses. A flat log telling a board member "the Safe Sport lead opened this child's record four times in March" tells them something about that child's family whether or not they can read the record itself.
Overrides in force
The second half of the screen is every override still live: who it is for, what it downgrades, who granted it, the reason, uses remaining, and when it expires.
This is the screen that answers "why did that family get in all season" — and the reason it is worth reading monthly.
What an override cannot do
An override downgrades a verdict. It never removes the reason and it never produces green. A membership suspension and an unauthorised caregiver cannot be overridden at all.
Retention
Audit rows are not editable and are not deleted by ordinary club actions. That is the point of them.