modules · audit
Daily security-watch cron
Sweeps the audit log nightly for anomalies (mass-signup spikes, DELETE bursts, stuck inquiries) and emails admins when something trips. Quiet when nothing is wrong.
in production, no sandbox here
This one runs in Broomstick Hub. It has no sandbox on this site, because the pattern only means anything against a real database, real roles, and real money. Rebuilding that as a toy would demonstrate the toy.
The write-up covers how it works and where it is deployed.