{# Partial: one <tr> for a single audit event, used for SSE insertion.
   Rendered server-side only as a snippet; the browser inserts it at
   `beforeend` of #audit-tbody when an SSE `audit` event arrives. #}
<tr class="border-t border-slate-100">
  <td class="px-3 py-2 font-mono text-xs">{{ e.timestamp.astimezone().strftime("%Y-%m-%d %H:%M:%S") }}</td>
  <td class="px-3 py-2 font-mono">{{ e.method }}</td>
  <td class="px-3 py-2 font-mono">{{ e.host }}</td>
  <td class="px-3 py-2 font-mono text-xs truncate max-w-xs" title="{{ e.uri }}">{{ e.uri }}</td>
  <td class="px-3 py-2">
    {% if e.decision == "allowed" %}
    <span class="text-xs px-2 py-0.5 rounded bg-green-100 text-green-800">{{ e.decision }}</span>
    {% else %}
    <span class="text-xs px-2 py-0.5 rounded bg-red-100 text-red-800">{{ e.decision }}</span>
    {% endif %}
  </td>
  <td class="px-3 py-2 text-xs text-slate-600">{{ e.reason }}</td>
  <td class="px-3 py-2 font-mono text-xs">{{ e.client_ip }}</td>
</tr>