drop squarespace admin audit · parse site admin events
flags contributor role grants · billing changes · form exports · code injection · off-hours · volume spikes · bulk destructive
heuristic screener · export schema varies by tenant/version — column mapping is best-effort · not definitive proof