{"ts":"2026-10-03T19:08:11Z","phase":"run","dst":"api.example.net","port":443,"proto":"tcp","rule":"run-allowlist DROP"}