# `mgf-http` — structured-event catalogue (LG-15)

Every structured log record carrying an `event` field is registered here; an
unregistered `event` is a defect (LG-15).

| `event` | Level | Where | Meaning |
|---|---|---|---|
| `mgf.http.download_complete` | INFO | `_download.py` | A streaming download finished + was atomically committed. |
| `mgf.http.download_resume_hash` | DEBUG | `_download.py` | A resumed download's partial-file hash was validated. |
| `mgf.http.download_resume_rejected` | WARNING | `_download.py` | A resume was rejected (hash/length mismatch); restarted from scratch. |
| `mgf.http.tls_disabled` | WARNING (audit) | `_client.py` | A client was constructed with `verify_tls=False` (security footgun). |

> **Known follow-up:** the TLS event uses `mgf_http.tls_disabled` (underscore)
> while the rest use `mgf.http.` — normalise to `mgf.http.` in a future LG pass.
