6 lines in your history in the last 11 days (2 September – 12 September) — every change to money, licenses and access, and every AI request, kept in the trail.
Times in UTC.
History
Every act that has changed this organization's money, licenses, access or configuration — plus privacy-safe evidence of every external AI request.
Illustrative · read-only. These decisions come from this organization’s stored scenario, read on 24 September 2026. counted Read from the platform operations register on this request.
The trail
Append-only. Nothing on this page can be edited, and no surface in this product offers a way to delete a line from it. A person's name comes off a line when that person asks to be forgotten.
No filter applied Showing 6 of 6 acts recorded against this organization in September 2026.Change
No filter applied Showing 6 of 6 acts recorded against this organization in September 2026.
Showing September 2026, the month of this organization’s stored scenario.
Scroll sideways for the remaining columns.
| When | Action | Actor role | Person | Object | What was recorded | Source surface | AI prompt proof fingerprint and counts; never content |
Reference the register's own line id |
|---|---|---|---|---|---|---|---|---|
| Approved | An administrator | the sponsor | This organization | reassignment plan approved. 3 of 1,443 seats waiting for a user have moved so far — $90 a month back at work. | not recorded | not an AI prompt | sample-decision-1 | |
| Approved | An administrator | the IT and Finance approver | This organization | Finance's 250,000 Cowork credits for the month-end close skill | not recorded | not an AI prompt | sample-decision-2 | |
| Set | An administrator | Sales’s budget owner | This organization | Sales pay-as-you-go thresholds set at 0.85× and 1.10× | not recorded | not an AI prompt | sample-decision-3 | |
| Marked | An administrator | an administrator | This organization | One quiet agent marked to retire in the admin center | not recorded | not an AI prompt | sample-decision-4 | |
| Declined | An administrator | Marketing’s approver | This organization | Marketing's request for 40 more Copilot seats | not recorded | not an AI prompt | sample-decision-5 | |
| Approved | An administrator | the shelf’s reviewer | This organization | "Month-end close checklist" published to the shelf | not recorded | not an AI prompt | sample-decision-6 |
Before-and-after detail is carried by the settings and access changes that record it. Earlier rows, and changes whose writer holds no prior value, leave those cells empty.
Read window coverage and register completeness
6 entries were read for this organization on this visit. Other organizations’ traffic does not limit this history. Every line carries the register's own reference, which is the handle to quote when asking for one act to be looked at. No line carries a state, so no state column is drawn. An act is recorded here after it has happened; the column appears the day a line is stored while its act is still under way.
What this trail does and does not capture
The design system asks for seven things per entry. This is the honest account of all seven.
The trail shows role, action, object and time at a glance. Open the contract only when you need retention, redaction and before/after detail.
Read the full seven-part audit contract
Who. Names appear only when the organization’s policy and the person’s choice allow them. A forgotten person reads “erased by request”. Microsoft records the consenting administrator in Microsoft Entra; it does not return that identity to Aristo.
Action, object and timestamp — carried. The action as it was stored, the object it was done to, and the moment it happened. Where the entry can be resolved back to an object that still exists, the object is a link; where it cannot, it is not given one it could not honor.
Before and after. Values come from the change itself. Aristo never reconstructs a previous value from today’s settings.
Source — carried for every external AI request, and for the settings and access changes that record it. Older writers may still show “not recorded”; that is an explicit gap on those rows rather than a source guessed from their action text.
Prompt and answer content — deliberately not retained. Each external request records a domain-separated SHA-256 fingerprint, character and item counts, purpose, source surface, intended and actual provider/model, boundary, fallback state, latency and token counts. Those facts prove which prompt bytes were used when the same bytes are presented for verification, without turning the audit register into a second store of customer documents, emails or conversations.
Some historical entries carry a colleague's address in their own stored text. This page removes addresses before rendering and publishes the count above.
Retention. This page reads this organization’s recorded history one month at a time, and a long month a view at a time; other organizations’ traffic does not shorten it. Nothing here expires and no line is deleted; the register is append-only and no surface in this product offers a delete. When a person asks to be forgotten, their name is removed from the lines that carry it; the lines stay.