{
  "schema_version": "1.0",
  "timestamp": "2026-09-21T09:41:02.184Z",
  "severity": "WARN",
  "event_id": "evt_demo_005",
  "event_name": "access.denied",
  "service": "identity-service",
  "attributes": {
    "actor_ref": "actor_demo_07",
    "action": "settings.write",
    "decision": "deny",
    "outcome": "not_executed"
  }
}