There should be a record of time punches that are edited, and who edits them.

Being that this data is related to finance, if someone is stealing from me, or helping their favorite employee to steal from me, I should have a record showing that.

Even better if there was an email or push notification, but a report would work, too.