Preview the synthetic events the live-target-lab streams to the detectors (~15% intentionally suspicious, labelled). The full lab runs as standing Docker services and reports ground-truth feedback. Models: identity-anomaly · otics-anomaly.