Sometimes it is just carelessness of the people. Being blind to your fellow people’s needs. Dropping trash where they stand. Refusing to walk two extra steps on the pathway and kill the grass instead.
In this case the requirements analysis of the parks and recreations dept was just bad and they are the asshole.
Tripwire and auditd can monitor a filesystem and notify you about changes. I don’t know the tools myself, because i never needed them. Maybe these can give you a hint on the responsible service.
If you suspect a certain service to be responsible: what do the logs of the service say? If nothing: increase the loglevel to info or debug?
Sorry. No solution. Just ideas. Good luck.