{"ts":"2026-10-03T19:01:10Z","phase":"install","host":"registry.npmjs.org","port":443,"sni":"registry.npmjs.org","method":"GET","path":"/","bytes_out":870,"bytes_in":91234,"decision":"allow","canary_hit":false}
{"ts":"2026-10-03T19:08:02Z","phase":"run","host":"gateway.lab","port":4000,"sni":"gateway.lab","method":"POST","path":"/v1/messages","bytes_out":9120,"bytes_in":2210,"decision":"allow","canary_hit":false}
{"ts":"2026-10-03T19:08:09Z","phase":"run","host":"api.example.com","port":443,"sni":"api.example.com","method":"GET","path":"/v2/cve","bytes_out":610,"bytes_in":12800,"decision":"allow","canary_hit":false}
{"ts":"2026-10-03T19:08:11Z","phase":"run","host":"api.example.net","port":443,"sni":"api.example.net","method":"POST","path":"/","bytes_out":0,"bytes_in":0,"decision":"block","canary_hit":false}
{"ts":"2026-10-03T19:08:30Z","phase":"run","host":"api.example.com","port":443,"sni":"api.example.com","method":"GET","path":"/v2/cve","bytes_out":598,"bytes_in":11930,"decision":"allow","canary_hit":false}
