As a Bitcoin Keeper user with a server key, I want a history of all changes made to my signing policy, so that I can detect unauthorized or unexpected modifications and understand the full lifecycle of my security configuration.
Background
Problem
If my signing policy is modified (even with a valid 2FA token), I have no way to:
- Know that a change happened
- See what the policy looked like before the change
- Know when the change was made
- Distinguish between a change I initiated vs. one from a delayed policy update being applied
This is a meaningful security gap. Policy changes are high-impact events, they directly affect how much can be spent, how quickly, and who can authorize it.
Requested behavior
When any of the following events occur, a record should be created:
- Signing policy updated (immediate or delayed apply)
- Secondary verification option added
- Secondary verification option removed
This log should be retrievable so I can review it.
As a Bitcoin Keeper user with a server key, I want a history of all changes made to my signing policy, so that I can detect unauthorized or unexpected modifications and understand the full lifecycle of my security configuration.
Background
Problem
If my signing policy is modified (even with a valid 2FA token), I have no way to:
This is a meaningful security gap. Policy changes are high-impact events, they directly affect how much can be spent, how quickly, and who can authorize it.
Requested behavior
When any of the following events occur, a record should be created:
This log should be retrievable so I can review it.