{
  "run_date": "2026-07-23",
  "events": [
    {
      "id": "99f1a566-eb63-4a45-a30b-57dee34afb60",
      "domain": "beyondblue.org.au",
      "domain_id": "2658c41e-8ec4-4dbb-8d6d-b6024b650ca0",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "spf_present_changed",
      "event_label": "SPF presence change",
      "event_time": "2026-07-22T18:22:33.776256+00:00",
      "summary": "beyondblue.org.au: spf_present changed",
      "old_value": false,
      "new_value": true,
      "category": "mail_hygiene",
      "severity": "medium",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "396af0b9-50df-4865-8655-e4a58b629d61",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c58f54a7-fd4e-4480-9155-724b2bd1ef0c",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-22T18:23:24.196806+00:00",
      "summary": "optus.com.au: mx_records changed",
      "old_value": [
        "10 mx.emea.email.fireeyecloud.com",
        "30 msgprdimsla005.optus.com.au",
        "30 msgprdimsla006.optus.com.au",
        "30 msgprdimsla007.optus.com.au",
        "30 msgprdimsla008.optus.com.au",
        "30 msgprdimsla009.optus.com.au",
        "30 msgprdimsla010.optus.com.au",
        "5 au-smtp-inbound-1.mimecast.com",
        "5 au-smtp-inbound-2.mimecast.com"
      ],
      "new_value": [
        "5 au-smtp-inbound-1.mimecast.com",
        "5 au-smtp-inbound-2.mimecast.com"
      ],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0b027eff-a831-407e-86ec-af970138c344",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "07d64fd7-c510-4889-95d1-b5c60e008ae3",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-22T18:22:03.349507+00:00",
      "summary": "unsw.edu.au: mx_records changed",
      "old_value": [
        "10 mxa-004a3801.gslb.pphosted.com",
        "10 mxb-004a3801.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ae91fb2c-a322-4d27-8645-69a01a7c8416",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "dcb9fd63-5217-4bb9-93aa-51370e4b2395",
      "domain": "vic.gov.au",
      "domain_id": "c796fd35-2db0-436f-bd91-217b6f2e55f8",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "mx_changed",
      "event_label": "Mail exchange change",
      "event_time": "2026-07-22T18:20:10.974170+00:00",
      "summary": "vic.gov.au: mx_records changed",
      "old_value": [
        "10 mxa-001fc401.gslb.pphosted.com",
        "10 mxb-001fc401.gslb.pphosted.com"
      ],
      "new_value": [],
      "category": "mail",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6a9a1070-2cb6-4aac-b332-9594f46fcec4",
      "signal_tier": "tier_1",
      "signal_label": "High-signal trust posture change",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "c1ff149e-8228-4070-9a48-556e47a25500",
      "domain": "unsw.edu.au",
      "domain_id": "504789d9-93e7-467a-8933-1def383be315",
      "cohort": "education-watchlist",
      "cohort_label": "Education Watchlist",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-22T18:22:03.569619+00:00",
      "summary": "unsw.edu.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ae91fb2c-a322-4d27-8645-69a01a7c8416",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "f7989223-7592-491f-8ddb-d89517914d2e",
      "domain": "vic.gov.au",
      "domain_id": "c796fd35-2db0-436f-bd91-217b6f2e55f8",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "email_provider_changed",
      "event_label": "Email provider change",
      "event_time": "2026-07-22T18:20:11.260377+00:00",
      "summary": "vic.gov.au: email_provider changed",
      "old_value": "Proofpoint",
      "new_value": null,
      "category": "provider",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6a9a1070-2cb6-4aac-b332-9594f46fcec4",
      "signal_tier": "tier_2",
      "signal_label": "Meaningful infrastructure movement",
      "certainty": "Observed",
      "visible_by_default": true,
      "collapse_by_default": false
    },
    {
      "id": "eeaefa6e-f285-4f0d-9887-a5de72eace88",
      "domain": "abc.net.au",
      "domain_id": "295df832-b961-491d-8bf3-30815f5a1b0a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:22:48.034985+00:00",
      "summary": "abc.net.au: a_records changed",
      "old_value": [
        "23.48.8.128"
      ],
      "new_value": [
        "23.38.168.128"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c37ed6b9-e303-4fcd-a1c5-d26cf1c2a637",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "76b8b091-0e5a-4ab8-9daf-604bd3ed085a",
      "domain": "agl.com.au",
      "domain_id": "0423069a-2fcc-4511-b53c-52c7c6b0bd3a",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:21:02.936688+00:00",
      "summary": "agl.com.au: a_records changed",
      "old_value": [
        "23.61.3.235"
      ],
      "new_value": [
        "23.218.127.201"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "2fd2cd1c-e121-4aa9-b105-a7438671b3fd",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "35be0dea-64e6-454b-b79c-eaa072adfacd",
      "domain": "care.org.au",
      "domain_id": "01ccd864-caf2-4596-b7bc-7dffffdf7be5",
      "cohort": "nfp-watchlist",
      "cohort_label": "Nfp Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-22T18:23:10.779172+00:00",
      "summary": "care.org.au: aaaa_records changed",
      "old_value": [
        "2600:9000:2348:3c00:2:88:1b80:93a1",
        "2600:9000:2348:6800:2:88:1b80:93a1",
        "2600:9000:2348:8e00:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:b600:2:88:1b80:93a1",
        "2600:9000:2348:cc00:2:88:1b80:93a1",
        "2600:9000:2348:ee00:2:88:1b80:93a1",
        "2600:9000:2348:fe00:2:88:1b80:93a1"
      ],
      "new_value": [
        "2600:9000:2348:2200:2:88:1b80:93a1",
        "2600:9000:2348:3400:2:88:1b80:93a1",
        "2600:9000:2348:4c00:2:88:1b80:93a1",
        "2600:9000:2348:6400:2:88:1b80:93a1",
        "2600:9000:2348:a200:2:88:1b80:93a1",
        "2600:9000:2348:a400:2:88:1b80:93a1",
        "2600:9000:2348:e000:2:88:1b80:93a1",
        "2600:9000:2348:e200:2:88:1b80:93a1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "7e914e91-a5a8-4775-9e6b-d27d235e5af7",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c4912c19-6a90-4efc-a6f9-d4f8325d324e",
      "domain": "carsales.com.au",
      "domain_id": "3acf5a2e-f649-4ce3-842e-ede0f466e8a2",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:25:49.324125+00:00",
      "summary": "carsales.com.au: a_records changed",
      "old_value": [
        "52.85.193.127",
        "52.85.193.26",
        "52.85.193.6",
        "52.85.193.83"
      ],
      "new_value": [
        "3.175.34.113",
        "3.175.34.129",
        "3.175.34.66",
        "3.175.34.76"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6727c6e0-0973-4468-af57-ddecea21367e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cf5ee3b0-9271-4cf3-b598-660bc94937de",
      "domain": "domain.com.au",
      "domain_id": "a1d39ea5-bbc8-4df9-a283-384b6dd2cf55",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:23:19.974965+00:00",
      "summary": "domain.com.au: a_records changed",
      "old_value": [
        "13.35.78.13",
        "13.35.78.2",
        "13.35.78.39",
        "13.35.78.57"
      ],
      "new_value": [
        "52.222.205.11",
        "52.222.205.113",
        "52.222.205.80",
        "52.222.205.92"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "4bc2ca8d-5020-42aa-930f-fd5ea8b210d9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f5a3958c-f852-4a04-abd9-066624ca0965",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:23:56.716984+00:00",
      "summary": "homeaffairs.gov.au: a_records changed",
      "old_value": [
        "23.216.145.13",
        "23.216.145.24"
      ],
      "new_value": [
        "23.216.145.69",
        "23.216.145.71"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6f71edf5-426f-46d3-8cc0-e7e4daa87cff",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "dd088913-cd30-435b-ae06-f330625ca318",
      "domain": "homeaffairs.gov.au",
      "domain_id": "a51a578f-f9e8-465d-9639-9f5013547056",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-22T18:23:56.980196+00:00",
      "summary": "homeaffairs.gov.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:ef::17d8:938d",
        "2600:1409:9800:ef::17d8:9390"
      ],
      "new_value": [
        "2600:1409:9800:1c::17d8:9145",
        "2600:1409:9800:1c::17d8:9147"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6f71edf5-426f-46d3-8cc0-e7e4daa87cff",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "81ad9fcf-1e30-437c-9b62-906849a1dc87",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:20:30.172149+00:00",
      "summary": "kmart.com.au: a_records changed",
      "old_value": [
        "23.212.62.201",
        "23.212.62.216"
      ],
      "new_value": [
        "104.77.178.180",
        "104.77.178.183"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "012f7aae-c41a-4748-8980-91bf90871b82",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a1b2e367-a38d-4e60-b924-54e644137387",
      "domain": "kmart.com.au",
      "domain_id": "524c9c70-fa54-40d8-9288-180c51e0bcd0",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-22T18:20:30.810648+00:00",
      "summary": "kmart.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:1d::17c2:7f2f",
        "2600:1405:7400:1d::17c2:7f37"
      ],
      "new_value": [
        "2600:141b:1c00:36::17d2:5ca7",
        "2600:141b:1c00:36::17d2:5cb1"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "012f7aae-c41a-4748-8980-91bf90871b82",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "f5538e56-8b5e-4ef2-b84c-7eb78045e8aa",
      "domain": "medibank.com.au",
      "domain_id": "b39345c1-316e-476a-b178-5649f15f6af7",
      "cohort": "healthcare-watchlist",
      "cohort_label": "Healthcare Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:24:10.865068+00:00",
      "summary": "medibank.com.au: a_records changed",
      "old_value": [
        "52.64.216.175",
        "54.66.6.106"
      ],
      "new_value": [
        "52.64.216.175",
        "54.79.188.251"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "73c21f48-db9c-4478-ac6c-6f7020829f04",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "52356010-429d-465e-aa56-3df45a1df1d2",
      "domain": "nab.com.au",
      "domain_id": "5c2f02fa-f296-43a7-aa45-fe00c561c1aa",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:20:37.883351+00:00",
      "summary": "nab.com.au: a_records changed",
      "old_value": [
        "23.201.195.47"
      ],
      "new_value": [
        "23.205.107.69",
        "23.205.107.78"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0943e8c3-debd-402f-82ee-e11b2044297e",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "de662acd-21a7-4f1a-bca5-9c60c8ffaf92",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-21T18:43:29.339293+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:ec00:290::ebe",
        "2600:1408:ec00:295::ebe",
        "2600:1408:ec00:297::ebe",
        "2600:1408:ec00:298::ebe",
        "2600:1408:ec00:29b::ebe"
      ],
      "new_value": [
        "2600:1409:9800:a80::ebe",
        "2600:1409:9800:a81::ebe",
        "2600:1409:9800:a87::ebe",
        "2600:1409:9800:a88::ebe",
        "2600:1409:9800:a97::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "9d416524-b37f-4530-8cad-431f6f9a357f",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ea8398f8-2f89-42be-868a-52fd7b14bc0c",
      "domain": "news.com.au",
      "domain_id": "ddceb0ac-c977-48a0-8fb1-dc3fe9cda97b",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-22T18:25:13.726427+00:00",
      "summary": "news.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:a80::ebe",
        "2600:1409:9800:a81::ebe",
        "2600:1409:9800:a87::ebe",
        "2600:1409:9800:a88::ebe",
        "2600:1409:9800:a97::ebe"
      ],
      "new_value": [
        "2600:1409:9800:1682::ebe",
        "2600:1409:9800:1685::ebe",
        "2600:1409:9800:1687::ebe",
        "2600:1409:9800:1688::ebe",
        "2600:1409:9800:168e::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ff6f9683-03c6-4498-9b8e-dc687a89d17b",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "8198fad8-3200-4e8f-a107-7250b8e7d7c1",
      "domain": "nrma.com.au",
      "domain_id": "37f68c2b-f8e7-4ef6-acfa-4125af52c0e3",
      "cohort": "finance-watchlist",
      "cohort_label": "Finance Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:22:18.323996+00:00",
      "summary": "nrma.com.au: a_records changed",
      "old_value": [
        "23.49.178.193"
      ],
      "new_value": [
        "23.207.130.176"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "c9c75da1-8a88-44e0-85ee-02a57fd88f51",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "7727e832-3983-49f9-8801-9a1f3e47ca19",
      "domain": "officeworks.com.au",
      "domain_id": "2e02993b-7a95-4723-9a26-59a9b08b44ab",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:21:31.377704+00:00",
      "summary": "officeworks.com.au: a_records changed",
      "old_value": [
        "13.226.238.125",
        "13.226.238.19",
        "13.226.238.63",
        "13.226.238.75"
      ],
      "new_value": [
        "108.138.246.22",
        "108.138.246.76",
        "108.138.246.80",
        "108.138.246.9"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "ea62c449-c897-4446-9b71-c327452a5877",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "6576224b-49db-48e5-9751-84d98ec26bb4",
      "domain": "optus.com.au",
      "domain_id": "9439bd11-90a8-4979-9b8e-3958c3df112b",
      "cohort": "telecom-watchlist",
      "cohort_label": "Telecom Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:23:23.885755+00:00",
      "summary": "optus.com.au: a_records changed",
      "old_value": [
        "23.1.240.164",
        "23.1.240.225",
        "23.1.240.81",
        "23.55.242.122",
        "23.55.242.138",
        "23.55.242.146",
        "23.55.242.147",
        "23.55.242.152"
      ],
      "new_value": [
        "23.55.242.122",
        "23.55.242.146",
        "23.55.242.147",
        "23.55.242.152"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "0b027eff-a831-407e-86ec-af970138c344",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "c78e38d2-add3-4b0d-b3ac-27da02a91a90",
      "domain": "originenergy.com.au",
      "domain_id": "c4bd661a-9563-4df0-a38b-df0b42a028a6",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:21:11.334491+00:00",
      "summary": "originenergy.com.au: a_records changed",
      "old_value": [
        "52.84.217.13",
        "52.84.217.42",
        "52.84.217.63",
        "52.84.217.96"
      ],
      "new_value": [
        "99.84.234.40",
        "99.84.234.6",
        "99.84.234.63",
        "99.84.234.98"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "6b23ce8a-bb8f-4dd1-89f2-cb137c8ccbb0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "ee112aa5-a633-49d3-a914-d5ad39367692",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:21:27.312113+00:00",
      "summary": "qantas.com.au: a_records changed",
      "old_value": [
        "23.222.241.147",
        "23.222.241.150"
      ],
      "new_value": [
        "23.39.174.148",
        "23.48.203.168"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8f4b5b0d-6d79-4e7d-a571-6a34d74640b0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "a90474db-cac3-4490-9e5d-4e746f51a385",
      "domain": "qantas.com.au",
      "domain_id": "26aeefe2-1460-4353-b95f-009eb9ea2e9e",
      "cohort": "critical-infrastructure",
      "cohort_label": "Critical Infrastructure",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-22T18:21:27.958689+00:00",
      "summary": "qantas.com.au: aaaa_records changed",
      "old_value": [
        "2600:1405:7400:1d::17c2:7f36",
        "2600:1405:7400:1d::17c2:7f4a"
      ],
      "new_value": [
        "2600:1408:5400:2f::17c3:258a",
        "2600:1408:5400:2f::17c3:2590"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8f4b5b0d-6d79-4e7d-a571-6a34d74640b0",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "bd1c0027-a664-42b5-8de4-be066d8a6f53",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:21:15.486066+00:00",
      "summary": "realestate.com.au: a_records changed",
      "old_value": [
        "23.53.11.136",
        "23.53.11.139"
      ],
      "new_value": [
        "23.216.149.140",
        "23.216.149.145"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fd155ca4-482b-44c6-a79e-0a68c05506b9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "15d14f1a-7309-4423-ba5d-939b4c045e51",
      "domain": "realestate.com.au",
      "domain_id": "7f5f2d67-8f93-4467-a6b0-e20363e28aa4",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-22T18:21:16.249975+00:00",
      "summary": "realestate.com.au: aaaa_records changed",
      "old_value": [
        "2600:1408:c400:11::17cd:6b50",
        "2600:1408:c400:11::17cd:6b56"
      ],
      "new_value": [
        "2600:1406:bc00:26::1723:1a0d",
        "2600:1406:bc00:26::1723:1a15"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "fd155ca4-482b-44c6-a79e-0a68c05506b9",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "47fa9466-6d31-450c-a09a-7607447bf8fb",
      "domain": "target.com.au",
      "domain_id": "3142ff97-17d2-4c0a-9acc-a5394bf2616c",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:25:05.503302+00:00",
      "summary": "target.com.au: a_records changed",
      "old_value": [
        "23.212.251.198",
        "23.212.251.207"
      ],
      "new_value": [
        "23.213.34.73",
        "23.213.34.88"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "534f3254-aa28-4f0f-a7e6-fcc755e151c1",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "e52c71e7-745c-4f19-9e93-61507fba4165",
      "domain": "theaustralian.com.au",
      "domain_id": "5bd486d6-d424-4868-b043-5ebbe36da11a",
      "cohort": "media-watchlist",
      "cohort_label": "Media Watchlist",
      "event_type": "aaaa_changed",
      "event_label": "AAAA record change",
      "event_time": "2026-07-22T18:24:24.879614+00:00",
      "summary": "theaustralian.com.au: aaaa_records changed",
      "old_value": [
        "2600:1409:9800:a80::ebe",
        "2600:1409:9800:a8b::ebe",
        "2600:1409:9800:a8f::ebe",
        "2600:1409:9800:a90::ebe",
        "2600:1409:9800:a96::ebe"
      ],
      "new_value": [
        "2600:1409:9800:1681::ebe",
        "2600:1409:9800:1682::ebe",
        "2600:1409:9800:1685::ebe",
        "2600:1409:9800:1687::ebe",
        "2600:1409:9800:168e::ebe"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "284aaa50-1517-4032-9b06-fd482ff6fd33",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "4ea2e730-8b22-49e9-a433-66ee65db8d42",
      "domain": "woolworths.com.au",
      "domain_id": "94b188b0-2126-477a-b0da-23f05ffb2375",
      "cohort": "commercial-watchlist",
      "cohort_label": "Commercial Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:23:08.705799+00:00",
      "summary": "woolworths.com.au: a_records changed",
      "old_value": [
        "23.49.176.74"
      ],
      "new_value": [
        "184.29.111.204"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "495e0d21-634d-48d7-b247-f751288fbd53",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    },
    {
      "id": "cd65e827-0f80-4f5b-ae86-d1b26ed99353",
      "domain": "xero.com.au",
      "domain_id": "65b653c4-d173-4953-a435-34678df4f5a7",
      "cohort": "saas-watchlist",
      "cohort_label": "Saas Watchlist",
      "event_type": "a_changed",
      "event_label": "A record change",
      "event_time": "2026-07-22T18:24:15.892855+00:00",
      "summary": "xero.com.au: a_records changed",
      "old_value": [
        "23.212.248.199",
        "23.212.248.212"
      ],
      "new_value": [
        "23.212.251.88",
        "23.212.251.89"
      ],
      "category": "resolution",
      "severity": "info",
      "materiality": "supporting",
      "event_scope": "observatory",
      "snapshot_id": "8cb5a7c0-b2a5-4520-8d37-b5ed47069602",
      "signal_tier": "tier_3",
      "signal_label": "Routine or low-confidence churn",
      "certainty": "Observed",
      "visible_by_default": false,
      "collapse_by_default": true
    }
  ],
  "default_visibility_rule": "Material, medium/high severity, named high-signal event types, or personal-interest domains are visible by default."
}