{
  "traceId": "TRACE-2025-001",
  "policyId": "POL-PROD-001",
  "policyName": "Production Baseline Policy",
  "evaluationContext": {
    "digestEvaluated": "sha256:abc123def456",
    "tenantId": "TENANT-001",
    "environment": "production",
    "exposure": "internet"
  },
  "startedAt": "2025-12-24T12:00:00+00:00",
  "completedAt": "2025-12-24T12:00:00.042+00:00",
  "durationMs": 42,
  "outcome": "Pass",
  "steps": [
    {
      "stepNumber": 1,
      "ruleName": "block_critical",
      "priority": 5,
      "phase": 3,
      "condition": "severity.normalized \u003E= \u0022Critical\u0022",
      "conditionResult": false,
      "action": null,
      "explanation": "No critical vulnerabilities found in scan",
      "durationMs": 15,
      "vexMergeDetail": null,
      "profileApplicationDetail": null,
      "escalationDetail": null
    },
    {
      "stepNumber": 2,
      "ruleName": "allow_low_severity",
      "priority": 1,
      "phase": 3,
      "condition": "severity.normalized \u003C= \u0022Low\u0022",
      "conditionResult": true,
      "action": "status := \u0022allowed\u0022",
      "explanation": "All findings are Low severity or below",
      "durationMs": 12,
      "vexMergeDetail": null,
      "profileApplicationDetail": null,
      "escalationDetail": null
    }
  ],
  "finalStatus": "allowed",
  "matchedRuleCount": 1,
  "totalRuleCount": 2
}