The order that never arrived is in the proxy log, body included
The clinic says the medication order was sent at 14:07. Your app says it never received it. Neither side's log has the body.
The Hoody proxy sits in front of every container on the server and keeps one centralized log. GET /_logs?containerId=…&kind=request&includeRequestBody=true returns the bytes that reached the ordering container, and includeResponseBody=true returns what it answered: filterable by method and level, split by source=edge or backend, paginated by cursor. /_logs/stream tails it live over SSE.
No logging middleware, no PHI shipped to a log vendor, no debate about what the client "really sent." The capture happens at the proxy on your rented server, and the bodies stay where the containers are.
When the auditor asks what was transmitted at 14:07, the answer is the transmission.
The order that never arrived is in the proxy log, body included.