Provenance records user actions and ActiveRecord model changes in Rails applications. It groups changes per request and transaction, sanitizes sensitive data, tracks bulk operations and has_and_belongs_to_many changes, and ships structured audit events to any sink through configurable hooks.