From 1081d42760362423f2e6041c6141d8109f48dbad Mon Sep 17 00:00:00 2001
From: Zach <3724288+zedkipp@users.noreply.github.com>
Date: Thu, 8 Jan 2026 08:28:25 -0700
Subject: [PATCH] docs: fix boundary log proto docs (#21451)

Simple docs fix to correctly reflect how boundary actually works in
terms of allowing HTTP requests.
---
 agent/proto/agent.pb.go | 5 +++--
 agent/proto/agent.proto | 5 +++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/agent/proto/agent.pb.go b/agent/proto/agent.pb.go
index b43fb96dc9..172d1c4374 100644
--- a/agent/proto/agent.pb.go
+++ b/agent/proto/agent.pb.go
@@ -4538,8 +4538,9 @@ type BoundaryLog_HttpRequest struct {
 
 	Method string `protobuf:"bytes,1,opt,name=method,proto3" json:"method,omitempty"`
 	Url    string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
-	// The rule that resulted in this HTTP request not being allowed.
-	// Only populated when allowed = false.
+	// The rule that resulted in this HTTP request being allowed. Only populated
+	// when allowed = true because boundary denies requests by default and
+	// requires rule(s) that allow requests.
 	MatchedRule string `protobuf:"bytes,3,opt,name=matched_rule,json=matchedRule,proto3" json:"matched_rule,omitempty"`
 }
 
diff --git a/agent/proto/agent.proto b/agent/proto/agent.proto
index 9ff573bee5..f3513a042f 100644
--- a/agent/proto/agent.proto
+++ b/agent/proto/agent.proto
@@ -466,8 +466,9 @@ message BoundaryLog {
 	message HttpRequest {
 		string method = 1;
 		string url = 2;
-		// The rule that resulted in this HTTP request not being allowed.
-		// Only populated when allowed = false.
+		// The rule that resulted in this HTTP request being allowed. Only populated
+		// when allowed = true because boundary denies requests by default and
+		// requires rule(s) that allow requests.
 		string matched_rule = 3;
 	}