{"event_id":"endpoint-001","timestamp":"2026-08-25T09:00:00Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"lab_preflight","action":"verify-isolation","result":"passed","network_state":"disabled","synthetic_only":true}
{"event_id":"endpoint-002","timestamp":"2026-08-25T09:00:01Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"process_start","process_name":"benign-telemetry-demo","parent_process_name":"approved-course-runner","process_id":4100,"parent_process_id":4000,"result":"success","synthetic_only":true}
{"event_id":"endpoint-003","timestamp":"2026-08-25T09:00:02Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"directory_create","process_name":"benign-telemetry-demo","process_id":4100,"object_category":"fixed-course-temp-directory","result":"success","synthetic_only":true}
{"event_id":"endpoint-004","timestamp":"2026-08-25T09:00:03Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"file_create","process_name":"benign-telemetry-demo","process_id":4100,"object_name":"marker-alpha.txt","content_label":"CODERSSECRET_TOY_MARKER_ALPHA","result":"success","synthetic_only":true}
{"event_id":"endpoint-005","timestamp":"2026-08-25T09:00:04Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"file_create","process_name":"benign-telemetry-demo","process_id":4100,"object_name":"marker-beta.txt","content_label":"CODERSSECRET_TOY_MARKER_BETA","result":"success","synthetic_only":true}
{"event_id":"endpoint-006","timestamp":"2026-08-25T09:00:05Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"process_start","process_name":"node-version-child","parent_process_name":"benign-telemetry-demo","process_id":4101,"parent_process_id":4100,"behavior_label":"print-version-and-exit","result":"success","synthetic_only":true}
{"event_id":"endpoint-007","timestamp":"2026-08-25T09:00:06Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"network_summary","process_name":"benign-telemetry-demo","process_id":4100,"connection_count":0,"dns_query_count":0,"result":"no-network-observed","synthetic_only":true}
{"event_id":"endpoint-008","timestamp":"2026-08-25T09:00:07Z","host":"devbox-17.example","user":"learner-a","event_source":"course-fixture","event_type":"cleanup","process_name":"benign-telemetry-demo","process_id":4100,"removed_objects":["marker-alpha.txt","marker-beta.txt","synthetic-events.jsonl","fixed-course-temp-directory"],"result":"success","synthetic_only":true}
{"event_id":"endpoint-009","timestamp":"2026-08-25T09:15:00Z","host":"build-03.example","user":"northstar-build-service","event_source":"course-fixture","event_type":"release_review","event_action":"toy_release_review","marker":"NORTHSTAR_RELEASE_REVIEW","candidate_version":"4.2.1-course","provenance_state":"subject-digest-mismatch","result":"queued-for-review","synthetic_only":true}
{"event_id":"endpoint-010","timestamp":"2026-08-25T09:15:04Z","host":"build-03.example","user":"northstar-build-service","event_source":"course-fixture","event_type":"release_decision","event_action":"pause-candidate-version","candidate_version":"4.2.1-course","result":"paused","synthetic_only":true}