5.2.15 Recommendation State Log Table Policy Reference
Source: app/plugins/Awards/src/Policy/RecommendationsStatesLogTablePolicy.php
RecommendationsStatesLogTablePolicy is currently a thin BasePolicy subclass. It owns authorization for collection-level audit-history operations but has no custom query scope.
Any endpoint that lists logs must constrain through the visible parent recommendations before returning rows. Do not expose a tenant-wide audit list merely because the table policy authorizes the controller action. Add a tested custom scope here if a reusable log listing is introduced.
All log rows are tenant-local and may reveal otherwise restricted recommendation state.