apps/portal-admin/src/app/pages/audit/audit.html

@@ -3,9 +3,13 @@
     <h1 class="title">Audit log</h1>
     <p class="intro">
       Read-only view of <code>audit.events</code> per
-      <a href="https://github.com/adr/madr" rel="noopener" target="_blank">ADR-0013</a>. Every query
+      <a
-      run on this page emits its own <code>admin.audit.query</code> row — read access is itself
+        href="https://git.unespace.com/julien/apf_portal/src/branch/main/docs/decisions/0013-audit-trail-separated-postgres-append-only.md"
-      auditable.
+        rel="noopener"
+        target="_blank"
+        >ADR-0013</a
+      >. Every query run on this page emits its own <code>admin.audit.query</code> row — read access
+      is itself auditable.
     </p>
   </header>
 

apps/portal-admin/src/app/pages/users/users.html

@@ -3,9 +3,13 @@
     <h1 class="title">Users</h1>
     <p class="intro">
       Read-only directory of every identity that has signed in to portal-shell or portal-admin per
-      <a href="https://github.com/adr/madr" rel="noopener" target="_blank">ADR-0020</a>. Every query
+      <a
-      run on this page emits an <code>admin.users.query</code> audit row — directory access is
+        href="https://git.unespace.com/julien/apf_portal/src/branch/main/docs/decisions/0020-portal-admin-app.md"
-      itself auditable.
+        rel="noopener"
+        target="_blank"
+        >ADR-0020</a
+      >. Every query run on this page emits an <code>admin.users.query</code> audit row — directory
+      access is itself auditable.
     </p>
   </header>