drop segment debugger event log · parse identify / track events · timeline + findings + actor inventory · runs locally
flags identify/track spikes · write key rotation · PII in properties · failed delivery bursts · off-hours · volume spikes · bulk destructive
heuristic screener · export schema varies by tenant/version · column mapping is best-effort · parses artifacts locally · not definitive proof