Compliance

Audit log

Sensitive admin actions: user deactivate, role assign, refund status, payout mark paid.