What this records
A running log of the sensitive things admins do: refunds, order edits, admin access changes, and user management (create, password set, invite, disable). It's read-only — a paper trail, not something you edit.
Reading a row
Each row shows when it happened, who did it (their email), what they did, and key details (amount refunded, the affected person's email, etc.). Newest is at the top; older pages are below.
When it's empty
If nothing shows and you get an error, the log table hasn't been created yet — apply db/migrations/audit-log.sql in Supabase once and it starts recording.
Most actions ask you to confirm before anything permanent happens, and you'll see a small confirmation once it's done.
