What you’re basically saying makes a lot of sense.

Without proper logs, it’s really hard, like almost impossible, for ICANN Compliance to confirm whether registrars actually followed the policy, especially when things are reviewed much later or when there’s no external complaint to trigger an investigation.

At the same time, I also understand the concern that too much logging could become heavy and slow down normal abuse handling work.

So a fair middle ground would be to keep logging simple and focused on only the key steps—like when the complaint came in, whether ADC was done, when it started and ended, what was checked, what was found, and what action was taken.

If this is captured in a lightweight way (even a simple form or spreadsheet), it should give Compliance enough visibility without creating too much extra burden on registrars.
 

[…]