Your activity feed can show events from records the viewer can't open

Activity feeds often pull from an events table ordered by created_at, scoped by workspace_id. The event row stores a title snapshot and a record_id. The feed renders the snapshot without checking whet