Platform message log

Platform operators with super.communications.messages (granted alongside super.tenants) can open Platform → Activity & logs → Message log on the central host.

What appears here

Tenant product mail from all tenants (invoice sends, detention notices, and other message_scope=tenant rows).
Platform security mail (message_scope=platform): password reset and email verification. These never appear in a tenant’s Message log.

Security mail sandbox

Platform → Settings → General → Security mail delivery mode:

Mode	Behavior
`sandbox` (default)	Auth mail is stored as held platform rows without a body. Release from this Message log regenerates the message (fresh reset token or signed verification URL) and queues SES delivery.
`live`	Auth mail queues for immediate SES delivery.

Use sandbox while validating SES configuration. Switch to live only when operators are ready for real reset and verification links to reach users.

Held message actions

On a held row, platform operators may Release for delivery or Discard. Release regenerates security-mail bodies; discard is permanent.

Audit

Viewing platform-scoped security mail detail is audited (communication.security_mail.detail_viewed). Reset and verification URLs are not written to tenant-visible surfaces or to auth-send audit payloads.