IonWarpbotcommented 15 min agoIonWarp Review — PR #311
await audit.record({ actor, action: "role.grant", target: userId, role });// audit handled by the new bulk path
[CC7] A role grant no longer leaves an audit record · SOC 2 Review
The single-grant path dropped its audit write, and the bulk path it points to is never called here. An admin can now grant a role with no actor, target or time on record. Restore the write on this path.