Description
The firewall metric carries only zone, action and source, so it cannot say which rule fired, on which host, or from where, and rule IDs are opaque without a name. Bot score is a common security view. Parent of the firewall depth subtasks.
Acceptance Criteria
- #1 All subtasks are Done
Definition of Done
- #1 just check (fmt-check, lint, vet, test, tidy-check, build, vuln)
- #2 just ci before a change that touches the Dockerfile, goreleaser or the image (adds snapshot + image)
- #3 Every new signal or attribute name declared in internal/semconv and listed in docs/signals.md
Implementation Notes
Loop21: both firewall-depth children verified Done through task view. Tracker-only closure published with instrumentation landing; no new implementation attempt.
Final Summary
Closed parent after verifying both completed children; no new code change.