{
  "audit_id": "AUDIT-20260725-0001",
  "user": "ops_user01",
  "action": "update_risk_rule",
  "rule_id": "RULE-VELOCITY-01",
  "before": {
    "limit_per_min": 100
  },
  "after": {
    "limit_per_min": 80
  },
  "ip": "203.160.xxx.xxx",
  "location": "PH",
  "timestamp": "2026-07-25T09:18:04+08:00",
  "risk_score": 72,
  "tags": ["High Risk", "Velocity Rule", "Manual Change"]
}