{
  "run_date": "2026-09-28",
  "events": [
    {
      "id": "ee5f711c-5f18-4ee8-8eec-3a3eee2ccad4",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-09-27T20:10:15.649802+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "578e4649-5616-4b56-9b73-0adbdbf3f1eb",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "77877ac8-1891-4048-95ae-98aa87b0f6d8",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:10:53.655265+00:00",
      "summary": "auspost.com.au: rdap_status changed",
      "old_value": [
        "client delete prohibited",
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "client delete prohibited",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "3b0d34b0-22c4-47f7-b6bb-e04b7df818f7",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "6bcb112e-1243-4457-9a5c-9e93bee0974b",
      "domain": "commbank.com.au",
      "domain_id": "bb70a37e-919b-454d-9417-d6eb2fcf0e24",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:08:30.037100+00:00",
      "summary": "commbank.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "dae82953-2935-4263-93ad-bf948545830a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "7a547b39-b7be-4acf-bd00-5c6de3139018",
      "domain": "iag.com.au",
      "domain_id": "27632308-d381-4f44-9eb9-02664f075406",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:07:44.573586+00:00",
      "summary": "iag.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "36133358-9dc1-43a3-aaed-477c548a3e01",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "21ac2548-04ef-4e4c-a42f-9e96d6f0c210",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:07:30.320467+00:00",
      "summary": "kmart.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "60c31edb-39da-412c-b947-84218cda124e",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "afbd5589-2f07-4b8b-bc54-402ee6979ed2",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:11:44.911264+00:00",
      "summary": "medibank.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "2c23981e-022c-4962-b234-35af964ee9ac",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "8e89f9a9-e9e0-4627-a5da-154529787972",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-09-27T20:13:06.516572+00:00",
      "summary": "news.com.au: nameservers changed",
      "old_value": [
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net"
      ],
      "new_value": [
        "a1-246.akam.net",
        "a12-67.akam.net",
        "a13-64.akam.net",
        "a18-65.akam.net",
        "a5-66.akam.net",
        "a8-67.akam.net",
        "asia1.akam.net",
        "ns1-24.akam.net",
        "ns1-50.akam.net",
        "usc1.akam.net",
        "usc4.akam.net",
        "usw1.akam.net",
        "usw4.akam.net",
        "usw5.akam.net"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "b3724680-fde6-40a3-babe-c9e246ad40e5",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "47af4608-ed32-443b-8d2d-d27c63090f35",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:09:16.999310+00:00",
      "summary": "nrma.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "684fedaf-1fcb-49fd-b5b4-2a954cab2810",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "63e6f355-e766-485b-a06a-a822c0f88965",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:10:48.069180+00:00",
      "summary": "optus.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "018c665f-c433-49d3-9401-140f9e40dc87",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "016dc23f-59a3-4b94-a864-ddc405c8e8ac",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:08:17.683742+00:00",
      "summary": "realestate.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "a6372070-885b-4fbc-abee-bc9052bac10b",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "02350c1c-b7db-4ff4-a1d4-b37062e4aa3c",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:12:35.013689+00:00",
      "summary": "reece.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "a16c0c9a-d7f0-4bdd-8a5d-81fbda927f55",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "f8938bab-4264-47bf-997c-b2643e123753",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:12:10.974499+00:00",
      "summary": "target.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "new_value": [
        "server delete prohibited",
        "server renew prohibited",
        "server transfer prohibited",
        "server update prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "03061d3b-62ae-431d-9611-b33513dea239",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c11dbe14-9a34-4b7e-913b-28486c3af84a",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-09-27T20:11:58.291345+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "fcd72a38-4e6c-4e2d-958c-70233d215e7a",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "5907ec89-474f-4bba-9e8f-adea296ec0dd",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-09-27T20:10:28.744500+00:00",
      "summary": "woolworths.com.au: rdap_status changed",
      "old_value": [
        "renew period",
        "server renew prohibited"
      ],
      "new_value": [
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "d1997916-1fd9-4c28-99a4-167a8dfb24a0",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "bf6b347d-1709-4592-b1e2-7ab49b31ce3e",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:10:05.356778+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.199.20.137"
      ],
      "new_value": [
        "23.214.124.103"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a1211bb0-2791-4c4b-a0d6-6701189d465a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b55782b0-aae9-4171-9234-1662e652f76b",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:08:00.198074+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.202.154.130"
      ],
      "new_value": [
        "23.222.206.184"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "473a4a14-b758-49eb-b2e0-79895d8f13d9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a79f8f69-00c4-459b-9c06-94296c19c3fb",
      "domain": "auspost.com.au",
      "domain_id": "da561ddf-bcd7-497a-be21-9ee0e20cbb1d",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:10:53.392982+00:00",
      "summary": "auspost.com.au: a_records changed",
      "old_value": [
        "13.225.47.16",
        "13.225.47.64",
        "13.225.47.65",
        "13.225.47.95"
      ],
      "new_value": [
        "13.225.196.109",
        "13.225.196.114",
        "13.225.196.122",
        "13.225.196.77"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "3b0d34b0-22c4-47f7-b6bb-e04b7df818f7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "59710785-bf5b-45d2-9b60-3bdb3a6d1a19",
      "domain": "bigw.com.au",
      "domain_id": "42d5695c-af99-4c95-a746-5bbd1aba47bf",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:11:36.959472+00:00",
      "summary": "bigw.com.au: a_records changed",
      "old_value": [
        "104.119.185.104"
      ],
      "new_value": [
        "23.48.9.159"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "16389191-f796-4e5d-844d-e410814984f9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b423326a-ed77-4292-97de-0aaaa169a524",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:10:07.658715+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:2000:2:88:1b80:93a1",
        "2600:9000:2348:2800:2:88:1b80:93a1",
        "2600:9000:2348:8200:2:88:1b80:93a1",
        "2600:9000:2348:8c00:2:88:1b80:93a1",
        "2600:9000:2348:aa00:2:88:1b80:93a1",
        "2600:9000:2348:b200:2:88:1b80:93a1",
        "2600:9000:2348:e600:2:88:1b80:93a1",
        "2600:9000:2348:fc00:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:3800:2:88:1b80:93a1",
        "2600:9000:2348:4a00:2:88:1b80:93a1",
        "2600:9000:2348:7000:2:88:1b80:93a1",
        "2600:9000:2348:7e00:2:88:1b80:93a1",
        "2600:9000:2348:ae00:2:88:1b80:93a1",
        "2600:9000:2348:e000:2:88:1b80:93a1",
        "2600:9000:2348:f000:2:88:1b80:93a1",
        "2600:9000:2348:f600:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "effe110b-c873-4338-9c7c-604070392a2d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "acde21fa-8806-41a0-9069-7e34b0626b5d",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-26T19:54:45.705741+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "108.156.91.111",
        "108.156.91.28",
        "108.156.91.62",
        "108.156.91.87"
      ],
      "new_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f11eb8a1-7583-4169-9483-8bb8fc3897bd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "014c8c7d-90e2-4b94-b0c6-357cfa5cddd6",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:10:43.601698+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.249.74.12",
        "13.249.74.24",
        "13.249.74.36",
        "13.249.74.77"
      ],
      "new_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6b920412-c38b-4faf-a61e-7bc76ee72826",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "2e825371-8f3a-4d62-af51-c1572e552840",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:11:28.411994+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "104.119.189.192",
        "104.119.189.227"
      ],
      "new_value": [
        "23.48.203.169",
        "23.48.203.178"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cb4ca151-fc12-44b0-a101-f5cb05ed62ee",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "049f42cf-a7f1-4587-95a7-6b04682ed5c7",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:11:28.722138+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:15::1726:6db0",
        "2600:1418:a000:15::1726:6db1"
      ],
      "new_value": [
        "2600:1408:ec00:21::1735:238c",
        "2600:1408:ec00:21::1735:238d"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "cb4ca151-fc12-44b0-a101-f5cb05ed62ee",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "df0a43d0-ce68-47d5-8cd7-529c7a71f4c4",
      "domain": "humaan.com.au",
      "domain_id": "f878425c-c57c-4574-8484-4eb1fd19b7fb",
      "cohort": "smb-watchlist",
      "cohort_label": "Smb Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:09:33.587237+00:00",
      "summary": "humaan.com.au: a_records changed",
      "old_value": [
        "104.21.96.156",
        "172.67.184.128"
      ],
      "new_value": [
        "172.64.80.1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a482fd87-578c-4706-8d37-9ee42448833d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "787936bc-f803-4272-89a1-71ab6bcf442b",
      "domain": "humaan.com.au",
      "domain_id": "f878425c-c57c-4574-8484-4eb1fd19b7fb",
      "cohort": "smb-watchlist",
      "cohort_label": "Smb Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:09:33.854972+00:00",
      "summary": "humaan.com.au: aaaa_records changed",
      "old_value": [
        "2606:4700:3036::6815:609c",
        "2606:4700:3037::ac43:b880"
      ],
      "new_value": [
        "2606:4700:130:436c:6f75:6466:6c61:7265"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a482fd87-578c-4706-8d37-9ee42448833d",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6b59a268-4deb-4e5d-86ca-3a5985b04a8e",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:07:29.671227+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.73.207.168"
      ],
      "new_value": [
        "173.222.162.143",
        "173.222.162.171"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "60c31edb-39da-412c-b947-84218cda124e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7f986411-7ef4-417d-9cdf-930e028dcf77",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:07:30.028110+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:2f::1735:b85",
        "2600:1408:ec00:2f::1735:b91"
      ],
      "new_value": [
        "2600:1406:bc00:26::1723:1a16",
        "2600:1406:bc00:26::1723:1a1f"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "60c31edb-39da-412c-b947-84218cda124e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "123fc639-755c-49de-8a5f-15a0aefe2ebb",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:07:37.901400+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.48.203.145",
        "23.48.203.146"
      ],
      "new_value": [
        "173.222.162.151",
        "173.222.162.171",
        "173.222.162.175"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f1a5e8a0-6f70-4c68-bf1c-623ca2da024c",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "5e1d7cd8-7db1-490f-a552-3c39dd21d22e",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:13:06.769153+00:00",
      "summary": "news.com.au: a_records changed",
      "old_value": [
        "23.14.92.164"
      ],
      "new_value": [
        "173.222.168.242"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b3724680-fde6-40a3-babe-c9e246ad40e5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "1b83e50c-140f-416e-85ad-9fdf221bd935",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:13:07.395043+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:58b::ebe",
        "2600:1418:a000:58d::ebe",
        "2600:1418:a000:596::ebe",
        "2600:1418:a000:59e::ebe",
        "2600:1418:a000:5a5::ebe"
      ],
      "new_value": [
        "2600:1408:5400:183::ebe",
        "2600:1408:5400:184::ebe",
        "2600:1408:5400:194::ebe",
        "2600:1408:5400:195::ebe",
        "2600:1408:5400:19e::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b3724680-fde6-40a3-babe-c9e246ad40e5",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "22cda9e3-f421-4336-847a-f9333a204f08",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:09:16.745641+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.61.99.153"
      ],
      "new_value": [
        "23.58.170.198"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "684fedaf-1fcb-49fd-b5b4-2a954cab2810",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f3752a60-3d5e-40e4-93c4-3ccae3fc5eaa",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:08:34.397920+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "new_value": [
        "3.170.103.109",
        "3.170.103.29",
        "3.170.103.5",
        "3.170.103.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d99f224e-dec9-4ab6-be0e-0673502a41ae",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4c717470-8270-43e7-8eee-173e448dbbe7",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:08:04.872191+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "13.226.238.107",
        "13.226.238.125",
        "13.226.238.21",
        "13.226.238.7"
      ],
      "new_value": [
        "18.238.96.120",
        "18.238.96.122",
        "18.238.96.13",
        "18.238.96.64"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "51427187-bc8e-49da-8bd1-7940296e88a8",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b51a6ef4-e05b-4c2b-b4ee-08fe460594e9",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:08:17.750283+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "2.18.67.149",
        "2.18.67.155"
      ],
      "new_value": [
        "23.209.84.149",
        "23.209.84.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "059b589f-8a29-4c75-9ae6-539361816ac6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cf402b12-26bb-477d-beb7-72682b3d3119",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:08:18.048435+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:c400:c::17cd:6889",
        "2600:1408:c400:c::17cd:6896"
      ],
      "new_value": [
        "2600:1405:8400:8::17d1:5495",
        "2600:1405:8400:8::17d1:5496"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "059b589f-8a29-4c75-9ae6-539361816ac6",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f111d6a1-98ee-4a40-a596-095d286dffa0",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:08:16.481699+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.200.88.48",
        "23.200.88.74"
      ],
      "new_value": [
        "23.222.17.76",
        "23.222.17.78"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a6372070-885b-4fbc-abee-bc9052bac10b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f1f22d06-cd1f-4f0a-aa7a-8156c1c4d105",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:08:16.810726+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:2f::1735:b88",
        "2600:1408:ec00:2f::1735:b8b"
      ],
      "new_value": [
        "2600:1407:3c00:44::17dc:9044",
        "2600:1407:3c00:44::17dc:9050"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a6372070-885b-4fbc-abee-bc9052bac10b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ede35f2d-ce46-454f-8996-f9ba88692144",
      "domain": "reece.com.au",
      "domain_id": "8f2902ad-cdf1-4d89-a2a6-bb949e66a814",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:12:34.691841+00:00",
      "summary": "reece.com.au: a_records changed",
      "old_value": [
        "3.170.185.119",
        "3.170.185.127",
        "3.170.185.46",
        "3.170.185.91"
      ],
      "new_value": [
        "18.165.83.124",
        "18.165.83.31",
        "18.165.83.8",
        "18.165.83.91"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a16c0c9a-d7f0-4bdd-8a5d-81fbda927f55",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "67d5e4db-1ede-488d-aebf-403a1c0f2353",
      "domain": "rspca.org.au",
      "domain_id": "5daea98a-9488-4953-ab17-dde64c75686a",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:10:19.380142+00:00",
      "summary": "rspca.org.au: a_records changed",
      "old_value": [
        "104.21.78.71",
        "172.67.217.219"
      ],
      "new_value": [
        "172.64.80.1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ec26e3dd-468e-456f-b632-54332f72d2aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "aabb2c5d-4477-467a-b033-47e313771bc1",
      "domain": "rspca.org.au",
      "domain_id": "5daea98a-9488-4953-ab17-dde64c75686a",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:10:19.604422+00:00",
      "summary": "rspca.org.au: aaaa_records changed",
      "old_value": [
        "2606:4700:3031::6815:4e47",
        "2606:4700:3031::ac43:d9db"
      ],
      "new_value": [
        "2606:4700:130:436c:6f75:6466:6c61:7265"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ec26e3dd-468e-456f-b632-54332f72d2aa",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "01a66bb3-dc08-47f1-ac64-48faa72d88e7",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:12:02.934440+00:00",
      "summary": "theaustralian.com.au: a_records changed",
      "old_value": [
        "104.119.184.137"
      ],
      "new_value": [
        "173.222.168.242"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a8605034-e841-4f29-a25b-94d225af54df",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "aa159b82-319b-4bf5-bf64-1df82c5c740b",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-09-27T20:12:03.552011+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1418:a000:584::ebe",
        "2600:1418:a000:58e::ebe",
        "2600:1418:a000:592::ebe",
        "2600:1418:a000:5a6::ebe",
        "2600:1418:a000:5af::ebe"
      ],
      "new_value": [
        "2600:1408:5400:485::ebe",
        "2600:1408:5400:487::ebe",
        "2600:1408:5400:490::ebe",
        "2600:1408:5400:49a::ebe",
        "2600:1408:5400:4bb::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "a8605034-e841-4f29-a25b-94d225af54df",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4461a979-9ac4-40ad-929b-858d8aaf48ad",
      "domain": "westpac.com.au",
      "domain_id": "d7985a4a-d1c7-4f79-ae1e-0e612a1288b5",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:11:49.279309+00:00",
      "summary": "westpac.com.au: a_records changed",
      "old_value": [
        "18.154.110.113",
        "18.154.110.12",
        "18.154.110.7",
        "18.154.110.82"
      ],
      "new_value": [
        "18.165.83.47",
        "18.165.83.68",
        "18.165.83.74",
        "18.165.83.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2c223a01-e197-4da5-a8fc-0c874477ddc4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0591c55f-7cae-41a2-9eb8-cfd0159f0bfc",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:10:28.475078+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.45.137.104"
      ],
      "new_value": [
        "184.31.113.204"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d1997916-1fd9-4c28-99a4-167a8dfb24a0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b56e80ca-0b30-462c-bffb-65a8271c144c",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-09-27T20:11:08.376074+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.52.42.175",
        "23.52.42.189"
      ],
      "new_value": [
        "23.222.17.12",
        "23.222.17.5"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "51161d46-a0a5-42c6-99bd-847ea2a2228a",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}