MEDIUM story-coordinator-activity-approval-coordinator-008 3 pts

User Story

As a user
I want to view the complete correction and approval history for any activity registration, including who made each change, what was changed, when, and the documented reason
So that So that I have a transparent, immutable record of every state transition and correction that can be referenced during Bufdir audits, internal reviews, or when a peer mentor queries the outcome of their submission

Acceptance Criteria

  • Given a coordinator opens any registration detail within their organizational scope, when they navigate to the audit trail section, then a chronological timeline of all state changes is displayed with actor identity, timestamp, changed fields, and documented reasons
  • Given a correction was made, when the audit trail entry for that correction is displayed, then both the original field values and the corrected values are shown alongside the mandatory correction reason
  • Given an organization administrator views the audit trail for a registration, when the trail includes changes made by any coordinator in their organization, then all changes are visible regardless of which coordinator made them
  • Given a user attempts to modify an audit trail entry, when any write operation is attempted on a historical record, then the operation is blocked and an error is returned — audit records are immutable
  • Given the audit trail is being viewed for compliance purposes, when the administrator needs to export the history, then the trail can be exported in a structured format suitable for inclusion in compliance documentation

Business Value

Bufdir grant compliance requires organizations to demonstrate the accuracy and integrity of their activity reporting. When auditors question a specific registration — or when a peer mentor disputes a correction or rejection — coordinators and administrators need immediate access to a complete, timestamped history of every action taken on that record. Without an immutable audit trail, organizations are exposed to compliance risk and unable to substantiate their reported activity data, which can jeopardize continued funding.