The Activity page is a durable record of who did what, when, and from where -- including denied attempts, not just successful changes. EVENT (what category of action) and STATUS (Success/Denied) are separate columns so they never look the same at a glance. Click a row's Details link for the full before/after picture. Viewing this page needs its own permission, separate from Security or Blacklist management.

This works no matter where a change comes from -- there's no way around it. Whether it's the Console, the Worker, or a script someone wrote against the Api directly, every action gets recorded here, and every caller has to say which app it is (see Calling the API From Your Own Code). There's no setting to turn this off and no quiet path in that skips it.

See audit-logging.md for the full technical story.

See also: Calling the API From Your Own Code.