Audit log & Trash — Who can do what (2)

• The audit log and the Trash are membership-scoped: you only ever see entries and deleted records from workspaces you belong to. • Restore, Delete forever, and Empty trash all require delete permission on the record's table — workspace Admins and Editors by default; per-table overrides can grant or withhold this for anyone. • Contributors and Viewers can browse the Trash but cannot restore or purge unless a per-table override gives them full access. • Inviting, removing, or re-roling members is Admin-only, and each of those changes is itself logged as a Schema entry. • Support access entries are filed against the workspace, so every member who can read the log sees when RowFold support asked, who allowed it, and when each visit started and ended.