What change history should an internal tool keep?

INTERNAL TOOL CHANGE-HISTORY AGREEMENT
Record type / stable identifier:
Decisions that need an explanation:
Allowed fields / excluded values / safe display rules:
Event identifier / recorded time / time-zone rule:
Actor identity / service identity / approval reference:
Previous and resulting version:
Reason-required changes / correction-event reference:
Current-state and required-history commit boundary:
Failure policy / pending delivery / reconciliation owner:
Stale-save check / reload behavior:
History viewing / export / administration permissions:
Retention owner / permitted removal procedure:
External actions that a correction must not repeat:
Synthetic example / expected result / actual evidence:
Policy owner / review date:

BEFORE RELEASE
[ ] A second operator can explain the corrected value.
[ ] Valid unrelated edits survive the correction.
[ ] Failed attempts are not shown as committed changes.
[ ] History cannot grant permission for an external action.

ZenOut Labs | https://zenoutlabs.com/guides/internal-tool-change-history/