Skip to content

Audit log for signing policy changes #6963

@Parsh

Description

@Parsh

As a Bitcoin Keeper user with a server key, I want a history of all changes made to my signing policy, so that I can detect unauthorized or unexpected modifications and understand the full lifecycle of my security configuration.


Background

Problem

If my signing policy is modified (even with a valid 2FA token), I have no way to:

  • Know that a change happened
  • See what the policy looked like before the change
  • Know when the change was made
  • Distinguish between a change I initiated vs. one from a delayed policy update being applied

This is a meaningful security gap. Policy changes are high-impact events, they directly affect how much can be spent, how quickly, and who can authorize it.

Requested behavior

When any of the following events occur, a record should be created:

  • Signing policy updated (immediate or delayed apply)
  • Secondary verification option added
  • Secondary verification option removed

This log should be retrievable so I can review it.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions