SIEM & SOC export

Splunk/Elastic/QRadar-style forwarding — gateway, shadow AI, agentic events (CEF/JSON)

Customer POC framework

Builds CEF/JSON bundle from live events.