source_identity,destination,port,protocol,expected,evidence
workload-a.example.net,example.com,443,tcp+https,allow,pass:dns_tcp_https_tls;policy=egress-allow-web
workload-a.example.net,203.0.113.10,25,tcp,deny,pass:nc_timeout;policy=egress-deny-smtp