Why did this work yesterday and fail today?

Pick two moments. See exactly what changed between them — who gained authority, who lost it, what was delegated, what was revoked, what policies came into force. One answer to the most common operational question.

How this works

Every authority event — grants, revocations, delegations, agent creations, policy registrations — is recorded with a timestamp in the tenant's authority event log. Diffing between two timestamps replays the events in that window and renders exactly what changed.

The output is plain-language: "Bob Chen's wire-approval authority was revoked at 14:23. That's why this morning's approval succeeded and this afternoon's failed." No logs to read. No queries to write. No support ticket required.

Why this matters

The most common operational question in any controlled system is "why did this work yesterday and fail today?" Conventional systems require log analysis, database queries, or asking an administrator to recall the change. This screen answers in seconds, with cryptographic provenance behind every event.

Paired with the /why-allowed and /why-denied screens, you can take a denial that just happened, walk back to the moment it would have succeeded, and see the exact change that flipped the outcome.