Activity recording (Record what every admin and API response carried) logs, for each admin request, how many rows and bytes were returned and how long it took, so a session that is sweeping the admin can be told apart from one that is working in it. It is the only sensor that can see an assistant driving a real browser on a real login, because that traffic looks identical to the account's own work in every other way. It is on by default, records nothing retrospectively, keeps 90 days by default, and samples only 1% of ordinary storefront traffic as a baseline. It records only – it never blocks or alerts – and the Admin activity by account — last 7 days table shows the numbers without any threshold or verdict. Superadmins can switch it with Turn on activity recording / Stop recording on the AI Scrape Log.