## ADDED Requirements

### Requirement: Heartbeat egress is observed
Authenticated gateway heartbeat telemetry SHALL calculate egress from monotonic transmitted-byte deltas over monotonic elapsed time and MUST NOT report configured capacity as measured traffic.

#### Scenario: Controlled byte delta is sampled
- **WHEN** transmitted bytes increase by a known amount during a known interval
- **THEN** heartbeat egress equals the measured rate while configured capacity remains a separate registration value

### Requirement: Required telemetry remains bounded and low cardinality
The established authenticated path SHALL expose observed bytes, packets, drops, RTT, loss, jitter, queue delay, processing delay, pacing, reconnect, and provider state without session, route, credential, or payload labels.

#### Scenario: Telemetry snapshot is published
- **WHEN** the gateway emits a heartbeat after forwarding traffic
- **THEN** it carries the bounded process-level observations and no high-cardinality or secret-bearing value