Comment by _karie_

Wait no further. It's already happening.

One reason why a "logs are all you need" solution may fail: untrusted-log-as-injection[1].

Check those SBOM, and don't forget to include their CICD pipelines[2].

[1] https://github.com/jqwik-team/jqwik/issues/708#issuecomment-...