source_identity,destination,port,protocol,expected,evidence
workload-a.example.net,example.com,443,tcp+https,allow,pending
workload-a.example.net,203.0.113.10,25,tcp,deny,pending