Audit Explorer

Immutable, append-only audit trail for auditors and security: filter by actor, action, subject and reason; inspect before→after diffs, correlation chains, legal holds and hash-verified exports.

UX-29 GOV-06

Events today (17 Jul)

4,182

All modules · Dubai HQ scope

Privileged actions (24h)

All with mandatory reason

Overrides (7d)

1 pending post-review

Exports / prints (7d)

All watermarked & hashed

Active legal holds

1 deletion attempt blocked

Events — 128 match filtersUTC times

Time (UTC)	Actor · action	Subject	Outcome
17 Jul 09:42:11	Vikram Nair config.activate	CFG-COMM-114 v9 Commission plan	Success
17 Jul 09:15:03	Daniel Chen invoice.void	INV-2026-01187 Amina Noor · AED 25,000.00	Success · reason
17 Jul 08:57:40	ext: broker@primelink.ae document.download	DOC-SPA-00412-v3	Denied · Relationship
17 Jul 08:31:19	Noura Saeed kyc.checker.approve	KYC-2026-0871 Falcon Trading FZ-LLC	Success
17 Jul 07:44:52	sysadmin (break-glass) session.breakglass.start	Environment: production	Alerted · post-review due
16 Jul 15:22:08	Grace Okafor export.bulk	GL detail FY2026 Q2 Filter: cost center DXB-SALES	Success · hashed
16 Jul 14:22:31	Daniel Chen expense.approve	EXP-2214	Denied · SoD
16 Jul 13:08:44	admin: E. Petrova record.delete.request	DOC-LSE-2019-114 Lease archive, Bldg A	Blocked · Legal hold LH-2026-004
16 Jul 11:50:17	Mariam Al Suwaidi contract.supersede	SPA-00412 v2 → v3	Success · versioned
16 Jul 10:03:29	svc-outbox event.dispatch	OBX-51419 → webhook: portal-sync	Delivered
16 Jul 09:12:55	Yusuf Karim party.merge	P-100882 ⇐ P-101194 Duplicate: “A. Noor”	Success · reversible link kept

Event AUD-90411 — config.activateImmutable

Identity: Vikram Nair (vikram.nair@almanara.ae) · no impersonation · session MFA ✓
Context: Tenant prod-uae · Al Manara Properties LLC · Dubai HQ · channel: web · IP 10.20.●●.●● (masked)
Action: config.activate · subject Configuration/CFG-COMM-114 · outcome: success
Reason: “Activate FY2026-H2 commission plan per CR-2026-118” (mandatory — privileged action)
Authority: Approvers: Rashid Al Farsi, Fatima Rashid · policy POL-AUTH-2026.07 v14 · workflow WF-CFG-APPROVE v5
Trace: UTC 2026-07-17T09:42:11Z · correlation corr-7f3a92 · causation req-90233
Data movement: None (no export/print/share on this event)

Before → after (field-level diff)Protected values

commission_plan: FY2026-H2 (CFG-COMM-114) - default_rate: 1.75% + default_rate: 2.00% - offplan_bonus: none + offplan_bonus: 0.25% (Prototype Residences only) clawback_days: 90 (unchanged) - effective_from: 2026-01-01 + effective_from: 2026-08-01

Sensitive fields render masked to actors without the data-class permission; the stored diff itself is complete and tamper-evident.

Correlation chain — corr-7f3a92Outbox monitor

Request req-90233
09:42:09Z · API POST /config/activate Audit AUD-90411
09:42:11Z · this event Outbox OBX-51502
09:42:12Z · ConfigActivated v1 Dispatch
2 subscribers · 1 delivered · 1 retrying

Hop	Reference	Time (UTC)	Status
API request	`req-90233`	09:42:09Z	202 Accepted
Audit event	`AUD-90411`	09:42:11Z	Committed
Outbox record	`OBX-51502`	09:42:12Z	Published
Webhook: commissions svc	`dlv-33108`	09:42:14Z	Delivered
Webhook: analytics	`dlv-33109`	09:44:02Z	Retry 2/6 · backoff 120s

Legal holds — 4 active

Hold	Matter	Scope	Records	Placed by	State
LH-2026-004	Dispute — lease archive Bldg A Case DXB-C-2026-1108	Documents · Prototype Residences A · 2019–2021	1,204	Mariam Al Suwaidi · 04 Jun 2026	Hold — deletion blocked
LH-2026-003	Regulator inquiry — commission records	Finance · COM-* FY2025	318	Ahmed Al Blooshi · 22 May 2026	Hold
LH-2026-002	AML case AML-2026-0114	Party P-100882 + related transactions	86	Ahmed Al Blooshi · 03 Mar 2026	Hold — confidential
LH-2025-011	Employment dispute (HR)	HR file EMP-0244 (masked)	42	Mariam Al Suwaidi · 12 Nov 2025	Release review 01 Aug 2026

Retention & disposition policies (effective)Retention studio

Record series	Retention	Trigger	Disposition	Floor
AML/CDD records	5 years minimum	Latest relationship / transaction / report / investigation	Review → destroy	MLRO floor — may only extend
VAT real-estate records	15 years	Tax record-series schedule	Review → destroy	No shorter tenant setting
General VAT / tax	5 years	Fiscal year close	Destroy	Owner-configurable ≥ floor
Contracts (released)	10 years	Contract end	Archive → review	Versioned & locked
Audit trail	Life of system + export archive	—	No hard delete	Immutable

Blocked deletion recorded — GOV-06 control fired 16 Jul 2026 13:08 UTC: administrator Elena Petrova requested deletion of DOC-LSE-2019-114 (lease archive). The record is under legal hold LH-2026-004; deletion was blocked and the attempt recorded as event AUD-90287 with actor, reason and correlation corr-5cd118. Legal and the records manager were notified. No hard delete can bypass a hold.

⬇ Export 128 audit events

Purpose / recipient *

Format

Package hash: sha256:7be4 90d1 aa02 …e9c7 (computed on download)
Chain check: Hash chain verified — no gaps 01 Jan → 17 Jul 2026

Static render mockup — no live data. Source: ERP Modern Development Specification v2.0 · Covers: UX-29 (audit explorer filters, before/after, correlation), GOV-06 (audit, records, retention & legal hold; blocked deletion recorded; hashed, watermarked exports).