What’s tracked
Secret values (API keys, tokens, env variable values, file contents) are redacted before the diff is stored.
Reading an event
Each row shows when, who, what action, and which resource. Click a row to expand the full before / after JSON diff. The actor is a user, an API key, orsystem. OAuth callbacks log as system because the connect step happens after the redirect, outside any signed-in session.