If a Breach Falls in a Log

A PHP Slim app built around an export flow. /process-c6f50d generates exports but only ever logs a page_view event — never a protected_export. /status-40896a runs an "audit comparison."

The theme ("a breach that falls in a log") is the solution: you assert that a decisive event is missing from the log while another was observed:

{"export_id":"e5942704d0ebb20052dc2e1c","missing_event":"protected_export","observed_event":"page_view"}

{"ok":true,"effect":"decisive_security_event_missing","evidence":"proof_..."}

That missing=protected_export, observed=page_view pair is the only one that passes — a pure logic gate proving the security event that was never written. Flag down.