{"ts":"2026-10-10T18:12:21Z","phase":"run","dst":"api.example.net","port":443,"proto":"tcp","rule":"run-allowlist DROP"}