{"database": "audit", "table": "source_truth", "rows": [["cloudflare:firewall:events", 0, null, null, "2026-05-20T05:35:55Z", "bounded_known", "Cloudflare GraphQL Analytics firewallEventsAdaptive, filtered to action_neq=allow. 30-day retention. Captures blocks, challenges, log-only, bypass. Recon and exploit-attempt forensics.", null, null, null, null, "poll", 1440, "cloudflare:firewall:poller"]], "columns": ["source", "api_total", "api_oldest", "api_newest", "measured_at", "method", "notes", "event_source", "event_category", "live_event_source", "live_event_category", "mode", "freshness_sla_minutes", "heartbeat_source"], "primary_keys": ["source"], "primary_key_values": ["cloudflare:firewall:events"], "units": {}, "query_ms": 1.6727070324122906}