facts
The run:<field> facts a rule can read, as text. A field is present only when the run has evidence for it: signature (first 16 hex digits of the SHA-256 of the sorted distinct failure signatures), exit and signal (last one seen), step and duration-ms (the first failed step, from steps when one failed, else from the log), transport (distinct values, sorted, one per line).