Audit and installation log
What is logged, and where to read it.
Every change and every job is written to an append-only log, without secrets, including which account each command ran as. Events that belong to no office (hosts, people's credentials, the command types they approved) go to the installation log in Admin → Operations, which only administrators see.