Membership audit

Every project-member / group / invitation / user-lifecycle change is recorded.

Where to find it

• GET /api/projects/{id}/members/audit — needs the Project — Administer permission.
• (No UI yet — this is an API-only feature in v1.)

What's recorded

• PROJECT_MEMBER_ADDED / REMOVED / ROLE_CHANGED
• GROUP_CREATED / DELETED
• GROUP_MEMBER_ADDED / REMOVED
• PROJECT_GROUP_ATTACHED / DETACHED / ROLE_CHANGED
• INVITATION_SENT / ACCEPTED / REVOKED / RESENT
• ROLE_CREATED / UPDATED / DELETED — custom-role changes
• PROJECT_DEFAULT_ROLE_CHANGED — a project's default access was set, changed, or cleared

Why audit

Compliance and debugging. "Who removed me from the project?" — the audit log says.