type LogEvent = { event: string; requestId: string; code?: string; status?: number };
// Explicit allowlist: never pass arbitrary Error objects, inputs, cookies or URLs.
export function log(event: LogEvent) {
  console.info(JSON.stringify({ timestamp: new Date().toISOString(), ...event }));
}