About this block

Who Did What Table is the friendly workspace activity log: actor with avatar and email, a plain-English action verb (Deployed, Invited, Removed, Exported, Updated, Changed role), the target resource truncated at 48 characters, a relative time, and a result badge (Success, Pending, or Failed in outline). The header pairs a Filter button with Export CSV; the footer states the invariant: this log is append-only, entries cannot be edited or deleted.

Rows are one typed array with all fields present. Failed renders as outline badge, the others secondary, which keeps the table readable without color-coding every status.

When to use

Reach for this block on the workspace activity or security page, wired to your events endpoint sorted descending by time. Wire the Filter button to your filter state and Export CSV to a signed download.

A natural flow around it on an Application Pro page:

Before

• Settings shell

After

• Audit export card
• Filters and search

What you can display

One strong use is the workspace-wide event history. Other activity tables:

• Per resource log. The same shape scoped to one document or project, actor column narrowed.
• Auth log. Sign-in, sign-out, and MFA events with IP and device columns.
• API usage. Requests per key with status code and latency as the result columns.

Tip: the append-only note is not decoration; it is the trust signal that makes an activity log credible.