v2026.09.01.09 — 2026-09-01

• fix(waf): audit log rule-id showed the generic aggregator, not the attack rule