The Sanctuary Website Audit Trail

The website keeps a limited record of important administrative actions so that authorised decisions can be checked without unnecessarily monitoring residents.

What is recorded

• membership and PIN administration that materially changes a record;
• the assignment or removal of roles;
• important Library publication actions;
• exceptional Event deletion or booking reset;
• the creation of a Website Administrator account; and
• a security warning when repeated failed Administrator sign-ins cause a temporary block.

What is not recorded

• ordinary page visits, Library browsing or searches;
• every Design Studio keystroke or Work in Progress save;
• ordinary successful member logins; or
• PINs, passwords, access tokens or copies of personal contact details.

Who may see it

The full Audit Log is available only through protected Website Administration.

How long entries remain

Routine audit entries are retained for two years. Short-lived security entries are retained for six months unless they are needed for a continuing investigation. Expired entries are removed automatically.

The Audit Log cannot be edited or selectively erased. GitHub, Netlify and Render maintain their own technical and deployment histories, so the website does not duplicate those records.