Simulator tab

Dry-run a rule against recent traffic without deploying it.

Send a candidate rule here from the Editor's "Simulate →" (or the preview bar's "Test") button, or pick any saved rule from the dropdown. The Simulator replays the rule against the recent decisions loaded in the app and shows a Terraform-plan-style result:

• Plan summary — "N changed, M unchanged", followed by one line per verdict flip (~ 12 allow → deny), sorted by count.
• Affected decisions — a table of the individual rows that would flip: time, agent, destination, and the from → to verdict (first 30 shown, with a "+N more" count).

Use it before saving any non-trivial rule change — seeing "247 changed" when you expected a handful catches an over-broad match before it ships to prod.

Screenshot: Simulatordocs/public/screenshots/simulator.png