v2 -> v3: add payloadBytes and quarantineReason columns.
v3 -> v4: add userId, dataClassification, anomalyScore columns.