Security

Telemetry

Telemetry records detection and policy decisions so operators can inspect how the security layer behaved. It is the observable trail for the security system: when a check fires, the runtime records what happened so operators can correlate behavior with the selected policy and environment. Pointers Keep the telemetry shape stable enough for runbook use. Document any new event type next to the policy or detection feature that emits it. Prefer concise, actionable fields over verbose dumps.

Source repo
aoiflux/mutant
Source path
security/telemetry.go
Last reviewed
2026-07-03
Freshness tier
medium

Telemetry records detection and policy decisions so operators can inspect how the security layer behaved.

It is the observable trail for the security system: when a check fires, the runtime records what happened so operators can correlate behavior with the selected policy and environment.

Pointers

  • Keep the telemetry shape stable enough for runbook use.
  • Document any new event type next to the policy or detection feature that emits it.
  • Prefer concise, actionable fields over verbose dumps.

Telemetry Flow

flowchart LR A[Security event] --> B[Telemetry recorder] B --> C[Structured output] C --> D[Runbook / investigation]

Canonical Source