{
  "run_date": "2026-10-24",
  "events": [
    {
      "id": "f15a186a-0907-49a4-a358-2b83ef1fd50d",
      "domain": "adelaide.edu.au",
      "domain_id": "4b8d2c1d-81c2-4b5d-9dd5-0719e91aedf1",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-23T20:28:07.200349+00:00",
      "summary": "adelaide.edu.au: nameservers changed",
      "old_value": [
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "new_value": [
        "ns.adelaide.edu.au",
        "ns1.adelaide.edu.au",
        "ns1.anu.edu.au",
        "ns2.adelaide.edu.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "1324ff09-2cb9-43ff-8f43-b69a71fd1594",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "3b8c1e18-122d-4f55-8b69-56aca65b3dbe",
      "domain": "guidedogs.com.au",
      "domain_id": "ef03f821-a6c9-4e96-a75b-8c902a62a597",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "rdap_status_changed",
      "event_label": "RDAP status change",
      "event_time": "2026-10-23T20:27:01.500250+00:00",
      "summary": "guidedogs.com.au: rdap_status changed",
      "old_value": [
        "client delete prohibited",
        "client renew prohibited",
        "client update prohibited",
        "renew period",
        "server renew prohibited"
      ],
      "new_value": [
        "client delete prohibited",
        "client renew prohibited",
        "client update prohibited",
        "server renew prohibited"
      ],
      "category": "status",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "33de0dbb-6f67-4d7c-8848-a57ad531434d",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "5c4c18eb-fbc5-4715-80af-dcdd395bf6a0",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-23T20:27:02.175250+00:00",
      "summary": "sydney.edu.au: nameservers changed",
      "old_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "dns-1.sydney.edu.au",
        "dns-2.sydney.edu.au",
        "extro.ucc.usyd.edu.au",
        "metro.ucc.usyd.edu.au",
        "ns-440.awsdns-55.com",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "fc9d51ae-c324-4c24-a9a9-7fd7d822e276",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "f2f230a8-457f-4c2c-9edc-fa6a58ae30a4",
      "domain": "unimelb.edu.au",
      "domain_id": "5bcc8436-9604-45e9-9b0f-c8d590115aa4",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "nameservers_changed",
      "event_label": "Nameserver change",
      "event_time": "2026-10-23T20:29:24.832203+00:00",
      "summary": "unimelb.edu.au: nameservers changed",
      "old_value": [
        "edns-266.unimelb.net.au",
        "edns-396.unimelb.net.au",
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "new_value": [
        "ns1.aarnet.net.au",
        "ns2.aarnet.net.au",
        "ns3.aarnet.net.au"
      ],
      "category": "delegation",
      "severity": "medium",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "657224c9-e142-455f-a932-97be8dd7cefd",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "f87b6917-6c3a-4c0d-9781-79b5ae183c73",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "hosting_move_signal",
      "event_label": "Hosting Move Signal",
      "event_time": "2026-10-23T20:27:03.110044+00:00",
      "summary": "sydney.edu.au: nameserver and Provider Catalogue association changed together",
      "old_value": {
        "provider": {
          "state": "unmatched",
          "provider_ids": []
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "new_value": {
        "provider": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        },
        "nameservers": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ]
      },
      "category": "derived",
      "severity": "high",
      "materiality": "material",
      "event_scope": "observatory",
      "snapshot_id": "fc9d51ae-c324-4c24-a9a9-7fd7d822e276",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "83aeabd0-a8fd-4925-8450-abd0f56a081b",
      "domain": "sydney.edu.au",
      "domain_id": "765c7ce3-77b6-4f53-8654-d18a4e8f7580",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "dns_provider_changed",
      "event_label": "DNS provider change",
      "event_time": "2026-10-23T20:27:02.836410+00:00",
      "summary": "sydney.edu.au: dns_hosting provider association changed with observed infrastructure",
      "old_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "unmatched",
          "provider_ids": []
        }
      },
      "new_value": {
        "targets": [
          "dns-1.sydney.edu.au",
          "dns-2.sydney.edu.au",
          "extro.ucc.usyd.edu.au",
          "metro.ucc.usyd.edu.au",
          "ns-440.awsdns-55.com",
          "ns1.aarnet.net.au",
          "ns2.aarnet.net.au",
          "ns3.aarnet.net.au"
        ],
        "identity": {
          "state": "matched",
          "provider_ids": [
            "amazon"
          ]
        }
      },
      "category": "provider",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fc9d51ae-c324-4c24-a9a9-7fd7d822e276",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "dba8ab1e-27a4-4f8c-af17-bdd673c145ab",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:27:33.988683+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.222.200.128"
      ],
      "new_value": [
        "184.29.30.133"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8c3e2302-7170-443e-b357-2ef1dc32a471",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "22fb45d3-9af1-4450-ab6d-327daefcf5e3",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:25:38.677241+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "173.223.1.52"
      ],
      "new_value": [
        "184.31.113.236"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "418a1de1-e17a-4c52-a837-4f2fcd2793fe",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "25191772-8f7d-4330-8243-31f5d4c40e2b",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-23T20:27:59.320612+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:1a00:2:88:1b80:93a1",
        "2600:9000:2348:3400:2:88:1b80:93a1",
        "2600:9000:2348:5a00:2:88:1b80:93a1",
        "2600:9000:2348:5e00:2:88:1b80:93a1",
        "2600:9000:2348:7200:2:88:1b80:93a1",
        "2600:9000:2348:9800:2:88:1b80:93a1",
        "2600:9000:2348:c800:2:88:1b80:93a1",
        "2600:9000:2348:ec00:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:400:2:88:1b80:93a1",
        "2600:9000:2348:4600:2:88:1b80:93a1",
        "2600:9000:2348:4800:2:88:1b80:93a1",
        "2600:9000:2348:7800:2:88:1b80:93a1",
        "2600:9000:2348:8800:2:88:1b80:93a1",
        "2600:9000:2348:cc00:2:88:1b80:93a1",
        "2600:9000:2348:d600:2:88:1b80:93a1",
        "2600:9000:2348:fa00:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d22d3b36-4164-402b-a678-774cabe1fbb0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "9edd0fd7-90ba-400b-9c7f-570f3ba8225b",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:30:47.145774+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "18.238.96.73",
        "18.238.96.79",
        "18.238.96.90",
        "18.238.96.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7c9b2458-b067-4c5d-b044-769406cc2411",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dce9b380-6758-418f-82fe-9ca0374b2727",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:28:12.464534+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.35.78.13",
        "13.35.78.2",
        "13.35.78.39",
        "13.35.78.57"
      ],
      "new_value": [
        "18.160.213.127",
        "18.160.213.17",
        "18.160.213.27",
        "18.160.213.60"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0216e6ff-e145-424b-9e50-2940d839c232",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "44899fa5-9236-4af7-9b3b-5a9cc29be101",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:28:55.634678+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.43.51.168",
        "23.43.51.173"
      ],
      "new_value": [
        "23.209.84.173",
        "23.209.84.187"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "be88ba41-256a-41cc-9675-bb611ef41bb4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4a49b9af-0dc0-460d-9f6f-4e6f13ef14af",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-23T20:28:56.455741+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:11::173e:e2a2",
        "2600:1405:8400:11::173e:e2ae"
      ],
      "new_value": [
        "2600:1406:35:4::1722:3ea5",
        "2600:1406:35:4::1722:3eab"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "be88ba41-256a-41cc-9675-bb611ef41bb4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "73479a7a-0355-4e7a-b16f-6eb087607e06",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:25:02.699692+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.211.127.43",
        "23.211.127.60"
      ],
      "new_value": [
        "23.211.127.11",
        "23.211.127.30"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "699753f4-fd1e-42dc-bc88-b15b3e00b8e3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "aa76a43f-161b-4ddb-af0c-c60d8e101a24",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-23T20:25:03.174194+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1404:6400:62::17d3:7f2b",
        "2600:1404:6400:62::17d3:7f3c"
      ],
      "new_value": [
        "2600:1407:3c00:cc::172d:2ecd",
        "2600:1407:3c00:cc::172d:2ece"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "699753f4-fd1e-42dc-bc88-b15b3e00b8e3",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "b1540829-afe2-47bf-84db-0e17aa3ec404",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:25:15.554834+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.200.133.41",
        "23.200.133.56"
      ],
      "new_value": [
        "23.217.55.64",
        "23.217.55.68"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "f28f2e53-c122-49c1-b257-6df1183ac257",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dad6fe85-370e-4827-984f-9fef9459b255",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-23T20:30:28.942990+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:282::ebe",
        "2600:1405:8400:285::ebe",
        "2600:1405:8400:287::ebe",
        "2600:1405:8400:28e::ebe",
        "2600:1405:8400:295::ebe"
      ],
      "new_value": [
        "2600:1405:8400:481::ebe",
        "2600:1405:8400:482::ebe",
        "2600:1405:8400:486::ebe",
        "2600:1405:8400:487::ebe",
        "2600:1405:8400:489::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "d906c09a-ca02-47e4-8612-a3e2b2aaabb2",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "103f5cc6-5e4d-4fda-908b-1b1918f6fa06",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:26:02.531142+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.66.127.139",
        "23.66.127.142"
      ],
      "new_value": [
        "23.45.46.196",
        "23.45.46.210"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "dd86a8d5-3a42-4b46-86bb-6a60099389ff",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "d8c3c281-1a63-4dcb-9f21-63b840e776ce",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:25:44.390214+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.53.11.136",
        "23.53.11.142"
      ],
      "new_value": [
        "23.212.249.214",
        "23.212.249.217"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7f9c9c19-5af2-4fd5-a37b-f91620cc352e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a584adce-8b70-4f08-b277-394a9d29d6cd",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-23T20:25:44.743080+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:2f::1735:b88",
        "2600:1408:ec00:2f::1735:b8e"
      ],
      "new_value": [
        "2600:1408:ec00:2f::1735:b88",
        "2600:1408:ec00:2f::1735:b8b"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7f9c9c19-5af2-4fd5-a37b-f91620cc352e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7a3d272f-3a7d-4e2c-9b98-6388e1fe6fbb",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:30:03.820970+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.212.249.72",
        "23.212.249.75",
        "23.212.249.83",
        "23.212.249.88",
        "23.212.249.90"
      ],
      "new_value": [
        "23.209.84.140",
        "23.209.84.150"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2bcfce2a-a61c-4946-ac79-a9609c2cf06f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "0bad50b0-5abd-4bf7-8c58-48b45b4dbdb2",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-10-23T20:29:29.769469+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:8400:286::ebe",
        "2600:1405:8400:288::ebe",
        "2600:1405:8400:28a::ebe",
        "2600:1405:8400:28c::ebe",
        "2600:1405:8400:28f::ebe"
      ],
      "new_value": [
        "2600:1405:8400:482::ebe",
        "2600:1405:8400:484::ebe",
        "2600:1405:8400:486::ebe",
        "2600:1405:8400:487::ebe",
        "2600:1405:8400:489::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "b1145d02-f471-4373-8496-aeb48cadd6f4",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ac037b14-e875-4dd9-8e6c-301381d1524e",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:27:57.497900+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.48.9.159"
      ],
      "new_value": [
        "184.29.31.193"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "1969b1e1-5820-4e4d-a404-354c78ee99cf",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c5d05583-17d6-4bcb-ac5b-04dae619073e",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-10-23T20:29:04.253137+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.202.230.202",
        "23.202.230.213"
      ],
      "new_value": [
        "23.212.248.15",
        "23.212.248.7"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "57d413aa-4d37-4b9e-a5ed-31795af8b780",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}