waf_detections

{“what”:“UUID primary key, auto-generated for each detection.”,“why”:“Without it, rows cannot be uniquely referenced or updated.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:19:57.880486296+00:00”}

{“what”:“UUID referencing the assessment under test.”,“why”:“Without it, detections cannot be linked to a specific assessment, making analysis per assessment impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:19:57.944984915+00:00”}

{“what”:“Identifier of the WAF product that produced the detection.”,“why”:“Without it, the source WAF is unknown, preventing comparison across WAFs.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:19:57.993783521+00:00”}

{“what”:“Numeric confidence score, higher means more likely a true positive.”,“why”:“Without it, the reliability of the detection cannot be assessed, leading to false positives being treated equally.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:19:58.368543294+00:00”}

{“what”:“JSON object with raw request/response details from the WAF.”,“why”:“Without it, the detection cannot be investigated or reproduced, losing forensic value.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:19:58.489472462+00:00”}

{“what”:“Timestamp with timezone when the detection was logged.”,“why”:“Without it, the order and timing of detections is unknown, hindering temporal analysis.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:19:58.685802568+00:00”}