These are real examples of what gets transmitted β copy-paste from our codebase.
{
"event_id": "evt_a1b2c3d4e5f67890",
"event_type": "scan",
"timestamp": "2025-12-06T18:30:00.123456+00:00",
"priority": "standard",
"payload": {
"prompt_hash": "sha256:315f5bdb76d078c43b8ac0064e4a0164612b1fce77c869345bfc94c75894edd3",
"threat_detected": false,
"scan_duration_ms": 2.34,
"detection_count": 0,
"highest_severity": "none",
"rule_ids": [],
"families": [],
"l1_duration_ms": 1.12,
"l2_duration_ms": 0.0,
"l1_hit": false,
"l2_hit": false,
"l2_enabled": true,
"prompt_length": 45,
"action_taken": "allow",
"entry_point": "cli"
},
"org_id": "org_abc123",
"team_id": "team_xyz789"
}
{
"event_id": "evt_9f8e7d6c5b4a3210",
"event_type": "scan",
"timestamp": "2025-12-06T18:31:15.789012+00:00",
"priority": "critical",
"payload": {
"prompt_hash": "sha256:8a3b5c7d9e1f2a4b6c8d0e2f4a6b8c0d2e4f6a8b0c2d4e6f8a0b2c4d6e8f0a2b",
"threat_detected": true,
"scan_duration_ms": 5.67,
"detection_count": 2,
"highest_severity": "critical",
"rule_ids": ["pi-001", "pi-003"],
"families": ["PI"],
"l1_duration_ms": 1.45,
"l2_duration_ms": 3.22,
"l1_hit": true,
"l2_hit": true,
"l2_enabled": true,
"prompt_length": 128,
"action_taken": "block",
"entry_point": "cli"
},
"org_id": "org_abc123",
"team_id": "team_xyz789"
}