{
  "action": "block-if-sdd-catches-this",
  "type": "cc",
  "label": "credit card",
  "payload": "card: 4111 1111 1111 1111 exp 12/29 cvv 123",
  "note": "synthetic. industry test visa number.",
  "sdd": "cloudflare sensitive data detection is configured to BLOCK matches on this path prefix. if you are reading this in your client, sdd did not catch it — check the managed ruleset deployment."
}