What I’m asking if somebody is adjusting the "parent’ Quality Profile (I’m not sure if you’ve shared a screenshot of the parent or extended quality profile). You should be able to check the changelog of the parent Quality Profile, if what you’ve shared a screenshot of isn’t it.
I am absolutely at a loss for what cases System would do anything that isn’t involved in the startup and registering of rules. And, at second glance, changing a parent Quality Profile would recognize which user made the action (and wouldn’t register it as the system).
Can you quickly tell me how your SonarQube server is deployed? From a ZIP file, a Docker image…