docs: add example logs for first demo

1 files changed, 16 insertions, 1 deletions

diff --git a/share/man/README.md b/share/man/README.md
index e107801a..72c52028 100644
--- a/share/man/README.md
+++ b/share/man/README.md
@@ -447,10 +447,25 @@ when {
 ### Scenario 1: Unauthenticated Access
 
 ```bash
-curl http://localhost:10000/dashboard
+curl http://localhost:10000/sparkles
 # → 302 Redirect to GitLab login
 ```
 
+Sparkle Logs
+
+```
+{"app":"authzd","authzd":{"state":"IDLE","target":"dns:///0.0.0.0:20000"},"host":"localhost:10000","method":"GET","path":"/sparkles","protocol":"HTTP/1.1","scheme":"http","authorized":true}
+{"app":"sparkled","host":"","method":"GET","path":"/sparkles"}
+{"app":"envoy","authority":"localhost:10000","method":"GET","path":"/sparkles","protocol":"HTTP/1.1","response_code":200}
+```
+
+Authzd Logs
+
+```
+{"fields":{"method":"GET","host":"localhost:10000","path":"/sparkles","decision":"Deny","diagnostics":"Diagnostics { reason: {}, errors: [] }"},"target":"authzd::authorization::cedar_authorizer"}
+{"method":"POST","path":"/envoy.service.auth.v3.Authorization/Check","protocol":"HTTP/2","response_code":200,"user_agent":"grpc-go/1.73.0"}
+```
+
 ### Scenario 2: Static Asset (No Auth Required)
 
 ```bash