The ABAP system records the last run date of programs, function modules and transaction codes, and the core metric of the audit is the last execution timestamp, with filtering "last executed > 365 days" being a pragmatic threshold.