View an Audit Trail of All Proxy Registrations I Have Made
Coordinators acting as proxies are accountable for the accuracy of registrations they make on behalf of others. The system must maintain a comprehensive audit log that records the coordinator's identity, the timestamp of registration, the mentor on whose behalf the action was taken, and the activity details. This log must be accessible to the coordinator from their profile or work tab. For compliance purposes, the log must be immutable — entries can be flagged for review but not silently deleted. Corrections must be made by creating a corrective record, not by editing the original.
User Story
Acceptance Criteria
- Given I have made proxy registrations, when I navigate to the proxy audit log in the work tab, then I see a chronological list of all proxy registrations I have made
- Given the proxy audit log is open, when I filter by a specific peer mentor, then only activities registered on behalf of that mentor are shown
- Given the proxy audit log is open, when I filter by a date range, then only registrations within that range are displayed
- Given a proxy activity entry in the log, when I tap on it, then I see full details including the activity type, date, duration, mentor name, and the timestamp when I registered it
- Given I spot an error in a proxy registration, when I tap 'Request correction', then a correction form opens allowing me to flag the record and provide a correction note, without editing the original record
- Given an audit log entry has a correction flag, when my organization administrator views the log, then both the original and the correction note are visible with clear attribution
Business Value
Accountability is essential when one person acts on behalf of another. Without an audit trail, there is no way to distinguish legitimate proxy registrations from data errors or, in the worst case, misrepresentation. A transparent audit log protects the organization during Bufdir audits, protects coordinators from false accusations, and protects peer mentors by ensuring their records accurately reflect their actual contributions. This is a compliance requirement, not a nice-to-have.
Components
- Proxy Audit Logger infrastructure
- Proxy Audit Badge Widget ui
- Proxy Activity Repository data
- Proxy Activity Repository data
- Proxy Activity Data Models data
- Proxy Registration BLoC service
- Proxy Registration BLoC service
- Activity Attribution Service service
- Activity Attribution Validator service
- Coordinator Role Guard infrastructure