violation

type Violation struct {
	// Time is when the violation was logged.
	Time time.Time
	// Process and PID identify the offending process (best-effort).
	Process string
	PID     int
	// Operation is the denied sandbox operation, e.g. "network-outbound".
	Operation string
	// Path is the resource the operation targeted, when the message includes one.
	Path string
	// Message is the full composed log message, preserved verbatim.
	Message string
}