transaction-log-test.md records each HTTP pair (redacted Authorization) and internal function timings. Live API issued a new CID every time.