# Observability

Each sandbox reports CPU, CPU steal, RAM, disk and network. Steal shows how busy neighbours are, which is how overcommit stays visible.

```sh
harebox new --name obs
harebox metrics current
harebox events current
```

## Streams

```sh
harebox events --follow --timeout 1s
```

## Export

`harebox telemetry set --endpoint URL` stores an OTLP target. **The exporter itself isn't built yet**, so nothing is sent.

## Audit

Every write through the API is recorded, with its actor, source address and result.

```sh
harebox audit
```