From b7d8c9a45c0c8d1c048d15c5f1c817c82448ebc3 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 10 Aug 2026 17:14:23 +0200
Subject: [PATCH 01/54] Implement normalised http routes

---
 .../CakePHP/CakePHPIntegration.php            |   7 +-
 .../CodeIgniter/V2/CodeIgniterIntegration.php |  12 +
 .../Laminas/LaminasIntegration.php            |   5 +
 .../Laravel/LaravelIntegration.php            |   8 +-
 .../Integrations/Slim/SlimIntegration.php     |  26 +-
 .../Symfony/SymfonyIntegration.php            |   4 +
 .../WordPress/WordPressIntegrationLoader.php  |   7 +-
 .../Integrations/Yii/YiiIntegration.php       |   4 +
 src/DDTrace/Util/RouteNormalizer.php          | 518 ++++++++++++++++++
 src/api/Tag.php                               |   1 +
 .../CakePHP/V4_5/CommonScenariosTest.php      |   4 +
 .../CodeIgniter/V2_2/CommonScenariosTest.php  |   6 +-
 .../Slim/Latest/CommonScenariosTest.php       |   4 +
 .../Symfony/Latest/CommonScenariosTest.php    |   3 +
 .../Yii/Latest/CommonScenariosTest.php        |   4 +
 .../Util/Normalizer/RouteNormalizerTest.php   | 349 ++++++++++++
 ...oller_test.test_scenario_health_check.json |   1 +
 ..._test.test_scenario_get_parameterized.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...st.test_scenario_get_to_missing_route.json |   1 +
 ...est_scenario_get_to_missing_route_cgi.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ....test_scenario_get_with_exception_cgi.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ...ter.v3_1.exit_test.test_scenario_exit.json |   1 +
 ...atest.rest_test.test_scenario_rest2xx.json |   1 +
 ...atest.rest_test.test_scenario_rest4xx.json |   1 +
 ...atest.rest_test.test_scenario_rest5xx.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ...pigw_test.test_laravel_inferred_proxy.json |   1 +
 ...test_laravel_inferred_proxy_exception.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...t_scenario_get_with_ignored_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ...octane.apigw_test.test_inferred_proxy.json |   1 +
 ...gw_test.test_inferred_proxy_exception.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...t_scenario_get_with_ignored_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_dynamic_route.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_dynamic_route.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_dynamic_route.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ...aravel.v8_x.queue_test.test_broadcast.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...acks_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...acks_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...acks_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...acks_test.test_scenario_get_with_view.json |   1 +
 ..._test.test_scenario_get_return_string.json |   1 +
 ...test.test_scenario_get_with_exception.json |   1 +
 ...rios_test.test_scenario_get_with_view.json |   1 +
 89 files changed, 1028 insertions(+), 7 deletions(-)
 create mode 100644 src/DDTrace/Util/RouteNormalizer.php
 create mode 100644 tests/Unit/Util/Normalizer/RouteNormalizerTest.php

diff --git a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
index 9adf769112..2d416f19ea 100644
--- a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
+++ b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
@@ -71,7 +71,12 @@ public static function init(): int
 
             $rootSpan = \DDTrace\root_span();
             if ($rootSpan !== null) {
-                $rootSpan->meta[Tag::HTTP_ROUTE] = $app->template;
+                $template = $app->template;
+                $rootSpan->meta[Tag::HTTP_ROUTE] = $template;
+                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCakePHP($template);
+                if ($normalizedRoute !== null) {
+                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                }
             }
         };
 
diff --git a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
index 15c8f684f6..8b1b4ad6c0 100644
--- a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
+++ b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
@@ -230,6 +230,10 @@ private static function setHttpRoute($router, $rootSpan) {
         if (isset($router->routes[$uri]))
         {
             $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
+            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($uri);
+            if ($normalizedRoute !== null) {
+                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+            }
             return;
         }
 
@@ -244,6 +248,10 @@ private static function setHttpRoute($router, $rootSpan) {
             if (preg_match('#^'.$key.'$#', $uri))
             {
                 $rootSpan->meta[Tag::HTTP_ROUTE] = $origKey;
+                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($origKey);
+                if ($normalizedRoute !== null) {
+                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                }
                 return;
             }
         }
@@ -251,5 +259,9 @@ private static function setHttpRoute($router, $rootSpan) {
         // If we got this far it means we didn't encounter a
         // matching route so we'll set the site default route
         $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
+        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($uri);
+        if ($normalizedRoute !== null) {
+            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+        }
     }
 }
diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 8f72520fd4..462f3a7c2d 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -282,6 +282,11 @@ static function (SpanData $span) use ($controller, $action) {
                     $httpRoute = LaminasIntegration::httpRouteTemplateFromNamedRouteStack($this, (string) $routeName);
                     if ($httpRoute !== null && $httpRoute !== '') {
                         $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
+                        $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
+                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams);
+                        if ($normalizedRoute !== null) {
+                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                        }
                     }
                 }
 
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index bfbf6815a3..59a2d9a5eb 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -139,7 +139,13 @@ static function ($This, $scope, $args, $route) {
                     $rootSpan->meta[Tag::HTTP_URL] = \DDTrace\Util\Normalizer::urlSanitize($request->fullUrl());
                 }
                 if (\method_exists($route, 'uri')) {
-                    $rootSpan->meta[Tag::HTTP_ROUTE] = $route->uri();
+                    $httpRoute = $route->uri();
+                    $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
+                    $matchedParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
+                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaravel($httpRoute, $matchedParams);
+                    if ($normalizedRoute !== null) {
+                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                    }
                 }
                 if (\method_exists($route, 'parameters') && function_exists('\datadog\appsec\push_addresses')) {
                     $parameters = $route->parameters();
diff --git a/src/DDTrace/Integrations/Slim/SlimIntegration.php b/src/DDTrace/Integrations/Slim/SlimIntegration.php
index d135e66d81..8c1725dec0 100644
--- a/src/DDTrace/Integrations/Slim/SlimIntegration.php
+++ b/src/DDTrace/Integrations/Slim/SlimIntegration.php
@@ -75,11 +75,16 @@ static function ($errorMiddleware, $self, $args) use ($rootSpan, $integration) {
                         null,
                         static function ($router, $scope, $args, $return) use ($rootSpan) {
                             /** @var \Slim\Interfaces\RouteInterface $return */
-                            $rootSpan->meta[Tag::HTTP_ROUTE] = $return->getPattern();
+                            $pattern = $return->getPattern();
+                            $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
+                            if ($normalizedRoute !== null) {
+                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                            }
 
                             if (dd_trace_env_config("DD_HTTP_SERVER_ROUTE_BASED_NAMING")) {
                                 $rootSpan->resource =
-                                    $_SERVER['REQUEST_METHOD'] . ' ' . ($return->getName() ?: $return->getPattern());
+                                    $_SERVER['REQUEST_METHOD'] . ' ' . ($return->getName() ?: $pattern);
                             }
                         }
                     );
@@ -92,7 +97,13 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                         static function ($router, $scope, $args, $return) use ($rootSpan) {
                             /** @var \Slim\Interfaces\RouteInterface $route */
                             $route = $return;
-                            $rootSpan->meta[Tag::HTTP_ROUTE] = $route->getPattern();
+                            $pattern = $route->getPattern();
+                            $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
+                            // Normalized route will be refined in traceControllers once matched params are available
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
+                            if ($normalizedRoute !== null) {
+                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                            }
                         }
                     );
                 }
@@ -131,6 +142,15 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                                 $span->meta['slim.route.name'] = $routeName;
                                 $rootSpan->meta['slim.route.name'] = $routeName;
                             }
+                            // Refine normalized route now that matched params are available
+                            $matchedParams = method_exists($route, 'getArguments') ? ($route->getArguments() ?? []) : [];
+                            $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
+                            if ($pattern !== '') {
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams);
+                                if ($normalizedRoute !== null) {
+                                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                                }
+                            }
                         }
                     } else {
                         $rootSpan->meta['slim.route.controller'] = $callableName;
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index 2ac324ec74..fb90de1e0e 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -456,6 +456,10 @@ static function() {
 
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
+                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path);
+                    if ($normalizedRoute !== null) {
+                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                    }
                 }
             };
         } else {
diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index 72413204c9..119f68b1bf 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -731,7 +731,12 @@ static function (HookData $hook) use (
                 function_exists('is_404') && is_404() === false) {
                 $rootSpan = \DDTrace\root_span();
                 if (\property_exists($This, 'matched_rule')) {
-                    $rootSpan->meta[Tag::HTTP_ROUTE] = $This->matched_rule;
+                    $matchedRule = $This->matched_rule;
+                    $rootSpan->meta[Tag::HTTP_ROUTE] = $matchedRule;
+                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule);
+                    if ($normalizedRoute !== null) {
+                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                    }
                 }
             }
         });
diff --git a/src/DDTrace/Integrations/Yii/YiiIntegration.php b/src/DDTrace/Integrations/Yii/YiiIntegration.php
index 91fa862d5f..8acc12e904 100644
--- a/src/DDTrace/Integrations/Yii/YiiIntegration.php
+++ b/src/DDTrace/Integrations/Yii/YiiIntegration.php
@@ -156,6 +156,10 @@ function (SpanData $span, $args) use (&$firstController) {
 
                     $rootSpan->meta['app.route.path'] = $routePath;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $routePath;
+                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromYii($routePath);
+                    if ($normalizedRoute !== null) {
+                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                    }
 
                     if (dd_trace_env_config("DD_HTTP_SERVER_ROUTE_BASED_NAMING")) {
                         $resourceName = \str_replace(
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
new file mode 100644
index 0000000000..a613ac0eca
--- /dev/null
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -0,0 +1,518 @@
+<?php
+
+namespace DDTrace\Util;
+
+/**
+ * Normalizes framework-specific HTTP route strings to the _dd.appsec.normalized_route format
+ * defined in RFC-1103.
+ *
+ * The normalized route is a slash-separated sequence of atomic elements where each element
+ * is either a static constant (only [A-Za-z0-9.-~_], others URL-encoded) or a dynamic
+ * parameter in {name} notation. Parameters in the same URL segment are combined with
+ * the '+' marker.
+ *
+ * @internal
+ */
+class RouteNormalizer
+{
+    /**
+     * Normalize a Laravel route URI.
+     *
+     * Laravel uses {param} for required and {param?} for optional parameters.
+     * Mixed-segment routes like /photos/{id}.{format} become /photos/{id+format}.
+     *
+     * @param string $routeUri  URI from $route->uri(), e.g. "/users/{id}/{format?}"
+     * @param array  $matchedParams  Parameters from $route->parameters(); used to resolve optionals
+     * @return string|null Normalized route, or null on parse failure
+     */
+    public static function normalizeFromLaravel(string $routeUri, array $matchedParams = []): ?string
+    {
+        return self::normalizeBraceRoute($routeUri, $matchedParams);
+    }
+
+    /**
+     * Normalize a Slim route pattern.
+     *
+     * Slim uses {param} or {param:regex} for required parameters. Slim 4 supports optional
+     * segments in square brackets: /users/{id}[/{format}].
+     *
+     * @param string $pattern       Pattern from $route->getPattern(), e.g. "/users/{id:[0-9]+}"
+     * @param array  $matchedParams Matched params from $route->getArguments(); resolves optionals
+     * @return string|null
+     */
+    public static function normalizeFromSlim(string $pattern, array $matchedParams = []): ?string
+    {
+        return self::normalizeBraceRoute($pattern, $matchedParams, true);
+    }
+
+    /**
+     * Normalize a Symfony route path.
+     *
+     * The path produced by EndpointCatalog::pathForRoute() already uses {param} notation.
+     *
+     * @param string $path Path template, e.g. "/users/{id}"
+     * @return string|null
+     */
+    public static function normalizeFromSymfony(string $path): ?string
+    {
+        return self::normalizeBraceRoute($path, []);
+    }
+
+    /**
+     * Normalize a Laminas route template.
+     *
+     * Laminas uses :param for dynamic parameters and [...] for optional sections.
+     * The Wildcard route type produces "/*" which is treated as a catch-all.
+     * Example: "/users/:id[.:format]"
+     *
+     * @param string $template     Template from httpRouteTemplateFromMatchedRoute()
+     * @param array  $matchedParams Matched params from $routeMatch->getParams()
+     * @return string|null
+     */
+    public static function normalizeFromLaminas(string $template, array $matchedParams = []): ?string
+    {
+        $expanded = self::expandBracketOptionals($template, $matchedParams, ':');
+        // Convert wildcard segments ('*') to a {param} placeholder before brace conversion
+        $expanded = preg_replace('#/\*$#', '/{param1}', $expanded);
+        $braceFormat = self::colonParamsToBraces($expanded);
+        return self::normalizeBraceRoute($braceFormat, $matchedParams);
+    }
+
+    /**
+     * Normalize a CakePHP route template.
+     *
+     * CakePHP uses :param syntax and * / ** for catch-all segments.
+     *
+     * @param string $template Template from $app->template, e.g. "/articles/:id.:ext"
+     * @return string|null
+     */
+    public static function normalizeFromCakePHP(string $template): ?string
+    {
+        $braceFormat = self::cakephpToBraces($template);
+        return self::normalizeBraceRoute($braceFormat, []);
+    }
+
+    /**
+     * Normalize a Yii route path containing :param placeholders.
+     *
+     * The Yii integration builds a URL via Url::toRoute() with ":paramName" as
+     * placeholder values, producing a path like "/articles/:id".
+     *
+     * @param string $routePath Path from Url::toRoute() with colon placeholders
+     * @return string|null
+     */
+    public static function normalizeFromYii(string $routePath): ?string
+    {
+        $braceFormat = self::colonParamsToBraces($routePath);
+        return self::normalizeBraceRoute($braceFormat, []);
+    }
+
+    /**
+     * Normalize a CodeIgniter V2 route pattern.
+     *
+     * CodeIgniter uses :any / :num wildcards and positional regex groups.
+     * Named parameters are not available, so placeholders param1, param2, … are used.
+     *
+     * @param string $route Route key from $router->routes, e.g. "blog/(:num)"
+     * @return string|null
+     */
+    public static function normalizeFromCodeIgniter(string $route): ?string
+    {
+        $route = trim($route, '/');
+        if ($route === '') {
+            return '/';
+        }
+
+        $segments = explode('/', $route);
+        $normalizedSegments = [];
+        $paramIndex = 1;
+
+        foreach ($segments as $segment) {
+            if ($segment === '') {
+                continue;
+            }
+
+            $lower = strtolower($segment);
+            if (
+                $lower === ':any' || $lower === ':num' ||
+                $lower === '(:any)' || $lower === '(:num)'
+            ) {
+                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
+            } elseif (preg_match('/[()[\].*+?|^$\\\\]/', $segment) || strpos($segment, ':') !== false) {
+                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
+            } else {
+                $normalizedSegments[] = self::encodeStaticSegment($segment);
+            }
+        }
+
+        return '/' . implode('/', $normalizedSegments);
+    }
+
+    /**
+     * Normalize a WordPress matched_rule (regex).
+     *
+     * WordPress route matching uses regex rules like "^blog/([^/]+)/?$".
+     * Named parameters are not available; placeholders param1, param2, … are used.
+     *
+     * @param string $matchedRule Value of $wp->matched_rule
+     * @return string|null
+     */
+    public static function normalizeFromWordPress(string $matchedRule): ?string
+    {
+        $rule = $matchedRule;
+
+        // Strip regex anchors
+        $rule = ltrim($rule, '^');
+        $rule = rtrim($rule, '$');
+
+        // Strip optional trailing slash pattern "\/?" or "/?"
+        if (preg_match('#\\\\?/\?$#', $rule, $m)) {
+            $rule = substr($rule, 0, -strlen($m[0]));
+        }
+
+        $rule = trim($rule, '/');
+        if ($rule === '') {
+            return '/';
+        }
+
+        // Use bracket-aware splitting so that [^/] character classes are not split
+        $segments = self::splitRegexBySlash($rule);
+        $normalizedSegments = [];
+        $paramIndex = 1;
+
+        foreach ($segments as $segment) {
+            if ($segment === '') {
+                continue;
+            }
+
+            if (preg_match('/^\([^)]+\)$/', $segment)) {
+                // Whole segment is a single capture group
+                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
+            } elseif (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
+                // Contains regex metacharacters → treat as dynamic
+                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
+            } else {
+                $normalizedSegments[] = self::encodeStaticSegment($segment);
+            }
+        }
+
+        if (empty($normalizedSegments)) {
+            return '/{param1}';
+        }
+
+        return '/' . implode('/', $normalizedSegments);
+    }
+
+    /**
+     * Split a regex string by '/' but do not split inside character classes [...].
+     * This prevents [^/] from being broken into two segments.
+     */
+    private static function splitRegexBySlash(string $str): array
+    {
+        $segments = [];
+        $current = '';
+        $len = strlen($str);
+        $bracketDepth = 0;
+
+        for ($i = 0; $i < $len; $i++) {
+            $c = $str[$i];
+
+            if ($c === '\\' && $i + 1 < $len) {
+                $current .= $c . $str[$i + 1];
+                $i++;
+                continue;
+            }
+
+            if ($c === '[') {
+                $bracketDepth++;
+                $current .= $c;
+            } elseif ($c === ']' && $bracketDepth > 0) {
+                $bracketDepth--;
+                $current .= $c;
+            } elseif ($c === '/' && $bracketDepth === 0) {
+                $segments[] = $current;
+                $current = '';
+            } else {
+                $current .= $c;
+            }
+        }
+
+        $segments[] = $current;
+        return $segments;
+    }
+
+    // -------------------------------------------------------------------------
+    // Core brace-format normalizer
+    // -------------------------------------------------------------------------
+
+    /**
+     * Normalize a route that uses {param} notation.
+     *
+     * Handles:
+     *   {param}        - required parameter
+     *   {param?}       - optional parameter (resolved via $matchedParams)
+     *   {param:regex}  - regex-constrained parameter (constraint stripped)
+     *   [{param}]      - optional segment (Slim-style; only when $expandSquare=true)
+     *   Static text mixed with params in a segment → single combined element
+     *
+     * @param bool $expandSquare  When true, expand Slim-style [...] optional sections
+     */
+    private static function normalizeBraceRoute(
+        string $route,
+        array $matchedParams,
+        bool $expandSquare = false
+    ): ?string {
+        $route = trim($route);
+        if ($route === '' || $route === '/') {
+            return '/';
+        }
+
+        $trailingSlash = (strlen($route) > 1 && $route[-1] === '/') ? '/' : '';
+        $route = rtrim($route, '/');
+
+        if ($route[0] !== '/') {
+            $route = '/' . $route;
+        }
+
+        if ($expandSquare) {
+            $route = self::expandSquareBracketOptionals($route, $matchedParams);
+        }
+
+        $raw = ltrim($route, '/');
+        $parts = explode('/', $raw);
+        $normalizedSegments = [];
+
+        foreach ($parts as $segment) {
+            if ($segment === '') {
+                continue;
+            }
+
+            $result = self::normalizeBraceSegment($segment, $matchedParams);
+            if ($result === null) {
+                // Optional segment whose parameter is absent — skip
+                continue;
+            }
+
+            $normalizedSegments[] = $result;
+        }
+
+        return '/' . implode('/', $normalizedSegments) . $trailingSlash;
+    }
+
+    /**
+     * Normalize a single URL segment that may contain {param} placeholders.
+     *
+     * @return string|null The normalized element, or null if the segment is optional and absent
+     */
+    private static function normalizeBraceSegment(string $segment, array $matchedParams): ?string
+    {
+        preg_match_all('/\{([^}]+)\}/', $segment, $matches, PREG_SET_ORDER);
+
+        if (empty($matches)) {
+            return self::encodeStaticSegment($segment);
+        }
+
+        $paramNames = [];
+        foreach ($matches as $match) {
+            $raw = $match[1];
+
+            $isOptional = ($raw[-1] === '?');
+            if ($isOptional) {
+                $raw = substr($raw, 0, -1);
+            }
+
+            // Strip regex constraint: {param:regex} → param
+            $colon = strpos($raw, ':');
+            if ($colon !== false) {
+                $raw = substr($raw, 0, $colon);
+            }
+
+            $name = trim($raw);
+
+            if ($isOptional && !array_key_exists($name, $matchedParams)) {
+                return null;
+            }
+
+            $paramNames[] = self::encodeParamName($name);
+        }
+
+        if (count($paramNames) === 1) {
+            return '{' . $paramNames[0] . '}';
+        }
+
+        // Multiple params in the same segment → combine with the '+' marker
+        return '{' . implode('+', $paramNames) . '}';
+    }
+
+    // -------------------------------------------------------------------------
+    // Optional-section expanders
+    // -------------------------------------------------------------------------
+
+    /**
+     * Expand Slim-style optional sections [...] in a route based on matched params.
+     * Example: "/users/{id}[/{format}]" with format present → "/users/{id}/{format}"
+     */
+    private static function expandSquareBracketOptionals(string $route, array $matchedParams): string
+    {
+        // Expand from innermost to outermost by looping until stable
+        $prev = null;
+        while ($prev !== $route) {
+            $prev = $route;
+            $route = preg_replace_callback(
+                '/\[([^\[\]]*)\]/',
+                function ($m) use ($matchedParams) {
+                    $inner = $m[1];
+                    preg_match_all('/\{([^}?:]+)[?:]?[^}]*\}/', $inner, $pm);
+                    $innerParams = $pm[1];
+
+                    if (empty($innerParams)) {
+                        // Purely static optional section — include it (best effort)
+                        return $inner;
+                    }
+
+                    foreach ($innerParams as $param) {
+                        if (array_key_exists($param, $matchedParams)) {
+                            return $inner;
+                        }
+                    }
+
+                    return '';
+                },
+                $route
+            );
+        }
+        return $route;
+    }
+
+    /**
+     * Expand Laminas [...] optional sections based on matched params.
+     * Example: "/:id[.:format]" with format present → "/:id.:format"
+     */
+    private static function expandBracketOptionals(
+        string $template,
+        array $matchedParams,
+        string $paramPrefix = ':'
+    ): string {
+        $prev = null;
+        while ($prev !== $template) {
+            $prev = $template;
+            $template = preg_replace_callback(
+                '/\[([^\[\]]*)\]/',
+                function ($m) use ($matchedParams, $paramPrefix) {
+                    $inner = $m[1];
+                    $pattern = '/' . preg_quote($paramPrefix, '/') . '([a-zA-Z_][a-zA-Z0-9_]*)/';
+                    preg_match_all($pattern, $inner, $pm);
+                    $innerParams = $pm[1];
+
+                    foreach ($innerParams as $param) {
+                        if (array_key_exists($param, $matchedParams)) {
+                            return $inner;
+                        }
+                    }
+
+                    return '';
+                },
+                $template
+            );
+        }
+        return $template;
+    }
+
+    // -------------------------------------------------------------------------
+    // Framework-specific syntax converters
+    // -------------------------------------------------------------------------
+
+    /**
+     * Convert ":paramName" colon-prefix notation to "{paramName}" brace notation.
+     * Laminas segment constraints like ":param{constraint}" are also handled.
+     */
+    private static function colonParamsToBraces(string $template): string
+    {
+        return preg_replace_callback(
+            '/:([a-zA-Z_][a-zA-Z0-9_]*)(?:\{[^}]*\})?/',
+            static function ($m) {
+                return '{' . $m[1] . '}';
+            },
+            $template
+        );
+    }
+
+    /**
+     * Convert CakePHP route template syntax to brace notation.
+     * Handles :param and * / ** catch-all segments.
+     */
+    private static function cakephpToBraces(string $template): string
+    {
+        // Replace /** and /* with a {catchall} placeholder
+        $result = preg_replace('#/\*\*#', '/{catchall}', $template);
+        $result = preg_replace('#/\*(?!\*)#', '/{catchall}', $result);
+
+        // Replace remaining bare * (e.g. at start or standalone segment)
+        $result = preg_replace('#(?<![/*])\*(?![/*])#', '{catchall}', $result);
+
+        return preg_replace_callback(
+            '/:([a-zA-Z_][a-zA-Z0-9_]*)/',
+            static function ($m) {
+                return '{' . $m[1] . '}';
+            },
+            $result
+        );
+    }
+
+    // -------------------------------------------------------------------------
+    // Character-level encoding helpers
+    // -------------------------------------------------------------------------
+
+    /**
+     * URL-encode characters in a static segment that are outside [A-Za-z0-9.-~_].
+     * Already-encoded percent sequences are left intact (hex digits uppercased).
+     */
+    public static function encodeStaticSegment(string $segment): string
+    {
+        $result = '';
+        $len = strlen($segment);
+        for ($i = 0; $i < $len; $i++) {
+            $c = $segment[$i];
+            if (
+                ($c >= 'A' && $c <= 'Z') || ($c >= 'a' && $c <= 'z') ||
+                ($c >= '0' && $c <= '9') ||
+                $c === '.' || $c === '-' || $c === '~' || $c === '_'
+            ) {
+                $result .= $c;
+            } elseif (
+                $c === '%' &&
+                $i + 2 < $len &&
+                ctype_xdigit($segment[$i + 1]) &&
+                ctype_xdigit($segment[$i + 2])
+            ) {
+                $result .= '%' . strtoupper($segment[$i + 1]) . strtoupper($segment[$i + 2]);
+                $i += 2;
+            } else {
+                $result .= rawurlencode($c);
+            }
+        }
+        return $result;
+    }
+
+    /**
+     * URL-encode reserved characters in a parameter name.
+     * Reserved: /?#+{} — these must not appear literally.
+     * The '+' sign is the combining marker and must be encoded if it appears in a
+     * framework-supplied name.
+     */
+    public static function encodeParamName(string $name): string
+    {
+        $reserved = '/?#+{}';
+        $result = '';
+        $len = strlen($name);
+        for ($i = 0; $i < $len; $i++) {
+            $c = $name[$i];
+            if (strpos($reserved, $c) !== false) {
+                $result .= rawurlencode($c);
+            } else {
+                $result .= $c;
+            }
+        }
+        return $result;
+    }
+}
diff --git a/src/api/Tag.php b/src/api/Tag.php
index f2cb6b7c1e..ca264c04db 100644
--- a/src/api/Tag.php
+++ b/src/api/Tag.php
@@ -26,6 +26,7 @@ class Tag
     const ERROR_STACK = 'error.stack'; // human readable version of the stack
     const HTTP_METHOD = 'http.method';
     const HTTP_ROUTE = 'http.route';
+    const APPSEC_NORMALIZED_ROUTE = '_dd.appsec.normalized_route';
     const HTTP_STATUS_CODE = 'http.status_code';
     const HTTP_URL = 'http.url';
     const HTTP_VERSION = 'http.version';
diff --git a/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php b/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php
index f1e8501573..953d3705cb 100644
--- a/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php
+++ b/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php
@@ -61,6 +61,7 @@ public function provideSpecs()
                         'http.route' => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Controller.invokeAction',
@@ -87,6 +88,7 @@ public function provideSpecs()
                         'http.route' => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Controller.invokeAction',
@@ -123,6 +125,7 @@ public function provideSpecs()
                         'http.route' => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                     ])->withExistingTagsNames([
                         'error.stack'
                     ])->setError(
@@ -165,6 +168,7 @@ public function provideSpecs()
                         'http.route' => '/parameterized/{param}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Controller.invokeAction',
diff --git a/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php b/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
index 69e022c6fc..900e78630b 100644
--- a/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
@@ -56,6 +56,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
                         Tag::HTTP_ROUTE => 'simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Simple.index',
@@ -81,6 +82,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
                         Tag::HTTP_ROUTE => 'simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Simple_View.index',
@@ -115,7 +117,8 @@ public function provideSpecs()
                         'app.endpoint' => 'Error_::index',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
-                        Tag::HTTP_ROUTE => 'error'
+                        Tag::HTTP_ROUTE => 'error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])
                     ->setError("Exception", "Uncaught Exception: datadog in %s:%d")
                     ->withExistingTagsNames(['error.stack'])
@@ -144,6 +147,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
                         Tag::HTTP_ROUTE =>  'parameterized/(:any)',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param1}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Parameterized.customAction',
diff --git a/tests/Integrations/Slim/Latest/CommonScenariosTest.php b/tests/Integrations/Slim/Latest/CommonScenariosTest.php
index e801ed8b35..2ab60ff6f8 100644
--- a/tests/Integrations/Slim/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Slim/Latest/CommonScenariosTest.php
@@ -122,6 +122,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         $this->wrapMiddleware([
                             SpanAssertion::build(
@@ -150,6 +151,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         $this->wrapMiddleware([
                             SpanAssertion::build(
@@ -187,6 +189,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])
                     ->setError(null, null)
                     ->withChildren([
@@ -221,6 +224,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/parameterized/{value}',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{value}',
                     ])->withChildren([
                         $this->wrapMiddleware([
                             SpanAssertion::build(
diff --git a/tests/Integrations/Symfony/Latest/CommonScenariosTest.php b/tests/Integrations/Symfony/Latest/CommonScenariosTest.php
index f7a1571c7a..0a30131775 100644
--- a/tests/Integrations/Symfony/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/Latest/CommonScenariosTest.php
@@ -74,6 +74,7 @@ public function provideSpecs()
                         'http.status_code' => '200',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'symfony',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         SpanAssertion::exists('symfony.httpkernel.kernel.handle')
                         ->withChildren([
@@ -113,6 +114,7 @@ public function provideSpecs()
                         'http.status_code' => '200',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'symfony',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         SpanAssertion::exists('symfony.kernel.terminate'),
                         SpanAssertion::exists('symfony.httpkernel.kernel.handle')->withChildren([
@@ -159,6 +161,7 @@ public function provideSpecs()
                         'http.status_code' => '500',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'symfony',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])
                     ->setError('Exception', 'An exception occurred')
                     ->withExistingTagsNames(['error.stack'])
diff --git a/tests/Integrations/Yii/Latest/CommonScenariosTest.php b/tests/Integrations/Yii/Latest/CommonScenariosTest.php
index 62410148e3..8a8509739a 100644
--- a/tests/Integrations/Yii/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Yii/Latest/CommonScenariosTest.php
@@ -59,6 +59,7 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionIndex',
                         'app.route.path' => '/simple',
                         Tag::HTTP_ROUTE => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])->withChildren([
@@ -103,6 +104,7 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionView',
                         'app.route.path' => '/simple_view',
                         Tag::HTTP_ROUTE => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])->withChildren([
@@ -150,6 +152,7 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionError',
                         'app.route.path' => '/error',
                         Tag::HTTP_ROUTE => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])
@@ -222,6 +225,7 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionParameterized',
                         'app.route.path' => '/parameterized/:value',
                         Tag::HTTP_ROUTE => '/parameterized/:value',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{value}',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])->withChildren([
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
new file mode 100644
index 0000000000..5b9c7785d3
--- /dev/null
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -0,0 +1,349 @@
+<?php
+
+namespace DDTrace\Tests\Unit\Util\Normalizer;
+
+use DDTrace\Tests\Common\BaseTestCase;
+use DDTrace\Util\RouteNormalizer;
+
+class RouteNormalizerTest extends BaseTestCase
+{
+    // -------------------------------------------------------------------------
+    // encodeStaticSegment
+    // -------------------------------------------------------------------------
+
+    public function testEncodeStaticSegmentAllowed()
+    {
+        $this->assertSame('hello', RouteNormalizer::encodeStaticSegment('hello'));
+        $this->assertSame('Hello-World_v1.0~test', RouteNormalizer::encodeStaticSegment('Hello-World_v1.0~test'));
+    }
+
+    public function testEncodeStaticSegmentEncodesReserved()
+    {
+        $this->assertSame('dump-request', RouteNormalizer::encodeStaticSegment('dump-request'));
+        $this->assertSame('foo%40bar', RouteNormalizer::encodeStaticSegment('foo@bar'));
+        $this->assertSame('foo%20bar', RouteNormalizer::encodeStaticSegment('foo bar'));
+    }
+
+    public function testEncodeStaticSegmentPreservesExistingPercentEncoding()
+    {
+        $this->assertSame('%2F', RouteNormalizer::encodeStaticSegment('%2F'));
+        $this->assertSame('%2F', RouteNormalizer::encodeStaticSegment('%2f'));
+    }
+
+    // -------------------------------------------------------------------------
+    // encodeParamName
+    // -------------------------------------------------------------------------
+
+    public function testEncodeParamNamePreservesNormal()
+    {
+        $this->assertSame('id', RouteNormalizer::encodeParamName('id'));
+        $this->assertSame('user_id', RouteNormalizer::encodeParamName('user_id'));
+    }
+
+    public function testEncodeParamNameEncodesPlusSign()
+    {
+        $this->assertSame('foo%2Bbar', RouteNormalizer::encodeParamName('foo+bar'));
+    }
+
+    public function testEncodeParamNameEncodesReserved()
+    {
+        $this->assertSame('foo%23bar', RouteNormalizer::encodeParamName('foo#bar'));
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromLaravel
+    // -------------------------------------------------------------------------
+
+    public function testLaravelSimpleRoute()
+    {
+        $this->assertSame('/users', RouteNormalizer::normalizeFromLaravel('/users'));
+        $this->assertSame('/users/{id}', RouteNormalizer::normalizeFromLaravel('/users/{id}'));
+    }
+
+    public function testLaravelOptionalParamPresent()
+    {
+        $result = RouteNormalizer::normalizeFromLaravel('/users/{id}/{format?}', ['id' => '1', 'format' => 'json']);
+        $this->assertSame('/users/{id}/{format}', $result);
+    }
+
+    public function testLaravelOptionalParamAbsent()
+    {
+        $result = RouteNormalizer::normalizeFromLaravel('/users/{id}/{format?}', ['id' => '1']);
+        $this->assertSame('/users/{id}', $result);
+    }
+
+    public function testLaravelMixedSegmentTwoParams()
+    {
+        // /photos/{id}.{format} → both in same URL segment → combined
+        $result = RouteNormalizer::normalizeFromLaravel('/photos/{id}.{format}', ['id' => '1', 'format' => 'jpg']);
+        $this->assertSame('/photos/{id+format}', $result);
+    }
+
+    public function testLaravelMixedSegmentOptionalFormat()
+    {
+        // /posts/:id(.:format) style — optional format present
+        $result = RouteNormalizer::normalizeFromLaravel('/posts/{id}/{format?}', ['id' => '1', 'format' => 'json']);
+        $this->assertSame('/posts/{id}/{format}', $result);
+
+        // optional format absent
+        $result = RouteNormalizer::normalizeFromLaravel('/posts/{id}/{format?}', ['id' => '1']);
+        $this->assertSame('/posts/{id}', $result);
+    }
+
+    public function testLaravelDeeperRoute()
+    {
+        $result = RouteNormalizer::normalizeFromLaravel('/dashboard/shared_widget_update/{id}/{widget_id}');
+        $this->assertSame('/dashboard/shared_widget_update/{id}/{widget_id}', $result);
+    }
+
+    public function testLaravelTrailingSlash()
+    {
+        $result = RouteNormalizer::normalizeFromLaravel('/users/{id}/');
+        $this->assertSame('/users/{id}/', $result);
+    }
+
+    public function testLaravelRoot()
+    {
+        $this->assertSame('/', RouteNormalizer::normalizeFromLaravel('/'));
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromSlim
+    // -------------------------------------------------------------------------
+
+    public function testSlimSimpleRoute()
+    {
+        $this->assertSame('/users/{id}', RouteNormalizer::normalizeFromSlim('/users/{id}'));
+    }
+
+    public function testSlimRegexConstraintStripped()
+    {
+        $this->assertSame('/users/{id}', RouteNormalizer::normalizeFromSlim('/users/{id:[0-9]+}'));
+        $this->assertSame('/v2/{name}/blobs', RouteNormalizer::normalizeFromSlim('/v2/{name:[a-zA-Z0-9-]+}/blobs'));
+    }
+
+    public function testSlimOptionalSegmentPresent()
+    {
+        $result = RouteNormalizer::normalizeFromSlim('/users/{id}[/{format}]', ['id' => '1', 'format' => 'json']);
+        $this->assertSame('/users/{id}/{format}', $result);
+    }
+
+    public function testSlimOptionalSegmentAbsent()
+    {
+        $result = RouteNormalizer::normalizeFromSlim('/users/{id}[/{format}]', ['id' => '1']);
+        $this->assertSame('/users/{id}', $result);
+    }
+
+    public function testSlimCatchAll()
+    {
+        $this->assertSame('/files/{file}', RouteNormalizer::normalizeFromSlim('/files/{file:.+}'));
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromSymfony
+    // -------------------------------------------------------------------------
+
+    public function testSymfonySimpleRoute()
+    {
+        $this->assertSame('/sleep/{seconds}', RouteNormalizer::normalizeFromSymfony('/sleep/{seconds}'));
+    }
+
+    public function testSymfonyMixedSegment()
+    {
+        // Symfony may produce routes like /posts/{id}.{_format}
+        $result = RouteNormalizer::normalizeFromSymfony('/posts/{id}.{_format}');
+        $this->assertSame('/posts/{id+_format}', $result);
+    }
+
+    public function testSymfonyStaticOnlyRoute()
+    {
+        $this->assertSame('/dump-request', RouteNormalizer::normalizeFromSymfony('/dump-request'));
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromLaminas
+    // -------------------------------------------------------------------------
+
+    public function testLaminasSimpleColon()
+    {
+        $this->assertSame('/users/{id}', RouteNormalizer::normalizeFromLaminas('/users/:id'));
+    }
+
+    public function testLaminasOptionalPresent()
+    {
+        $result = RouteNormalizer::normalizeFromLaminas('/users/:id[.:format]', ['id' => '1', 'format' => 'json']);
+        $this->assertSame('/users/{id+format}', $result);
+    }
+
+    public function testLaminasOptionalAbsent()
+    {
+        $result = RouteNormalizer::normalizeFromLaminas('/users/:id[.:format]', ['id' => '1']);
+        $this->assertSame('/users/{id}', $result);
+    }
+
+    public function testLaminasLiteralRoute()
+    {
+        $this->assertSame('/dump-request', RouteNormalizer::normalizeFromLaminas('/dump-request'));
+    }
+
+    public function testLaminasWildcard()
+    {
+        // Wildcard routes produce '/*' from laminasSegmentPartsToRouteTemplate
+        $result = RouteNormalizer::normalizeFromLaminas('/*');
+        $this->assertSame('/{param1}', $result);
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromCakePHP
+    // -------------------------------------------------------------------------
+
+    public function testCakePHPSimpleColon()
+    {
+        $this->assertSame('/articles/{id}', RouteNormalizer::normalizeFromCakePHP('/articles/:id'));
+    }
+
+    public function testCakePHPMixedSegment()
+    {
+        $result = RouteNormalizer::normalizeFromCakePHP('/articles/:id.:ext');
+        $this->assertSame('/articles/{id+ext}', $result);
+    }
+
+    public function testCakePHPCatchAll()
+    {
+        $this->assertSame('/{catchall}', RouteNormalizer::normalizeFromCakePHP('/*'));
+        $this->assertSame('/api/{catchall}', RouteNormalizer::normalizeFromCakePHP('/api/**'));
+    }
+
+    public function testCakePHPStaticRoute()
+    {
+        $this->assertSame('/admin/dashboard', RouteNormalizer::normalizeFromCakePHP('/admin/dashboard'));
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromYii
+    // -------------------------------------------------------------------------
+
+    public function testYiiSimpleColonPlaceholder()
+    {
+        $this->assertSame('/articles/{id}', RouteNormalizer::normalizeFromYii('/articles/:id'));
+    }
+
+    public function testYiiStaticRoute()
+    {
+        $this->assertSame('/site/index', RouteNormalizer::normalizeFromYii('/site/index'));
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromCodeIgniter
+    // -------------------------------------------------------------------------
+
+    public function testCodeIgniterLiteralRoute()
+    {
+        $this->assertSame('/articles/index', RouteNormalizer::normalizeFromCodeIgniter('articles/index'));
+    }
+
+    public function testCodeIgniterNumWildcard()
+    {
+        $this->assertSame('/blog/{param1}', RouteNormalizer::normalizeFromCodeIgniter('blog/(:num)'));
+    }
+
+    public function testCodeIgniterAnyWildcard()
+    {
+        $this->assertSame('/users/{param1}', RouteNormalizer::normalizeFromCodeIgniter('users/:any'));
+    }
+
+    public function testCodeIgniterMultipleWildcards()
+    {
+        $result = RouteNormalizer::normalizeFromCodeIgniter('posts/(:num)/comments/(:num)');
+        $this->assertSame('/posts/{param1}/comments/{param2}', $result);
+    }
+
+    public function testCodeIgniterCatchAll()
+    {
+        // A catch-all in CI is typically :any at the end
+        $this->assertSame('/{param1}', RouteNormalizer::normalizeFromCodeIgniter(':any'));
+    }
+
+    // -------------------------------------------------------------------------
+    // normalizeFromWordPress
+    // -------------------------------------------------------------------------
+
+    public function testWordPressSimpleRegex()
+    {
+        $result = RouteNormalizer::normalizeFromWordPress('^blog/([^/]+)/?$');
+        $this->assertSame('/blog/{param1}', $result);
+    }
+
+    public function testWordPressStaticRule()
+    {
+        $result = RouteNormalizer::normalizeFromWordPress('^about/?$');
+        $this->assertSame('/about', $result);
+    }
+
+    public function testWordPressMultipleGroups()
+    {
+        $result = RouteNormalizer::normalizeFromWordPress('^([^/]+)/([^/]+)/?$');
+        $this->assertSame('/{param1}/{param2}', $result);
+    }
+
+    public function testWordPressRootRule()
+    {
+        $result = RouteNormalizer::normalizeFromWordPress('^/?$');
+        $this->assertSame('/', $result);
+    }
+
+    // -------------------------------------------------------------------------
+    // RFC examples
+    // -------------------------------------------------------------------------
+
+    public function testRfcExampleFastApi()
+    {
+        // http.route: /dashboard/shared_widget_update/{id}/{widget_id}
+        $result = RouteNormalizer::normalizeFromLaravel('/dashboard/shared_widget_update/{id}/{widget_id}');
+        $this->assertSame('/dashboard/shared_widget_update/{id}/{widget_id}', $result);
+    }
+
+    public function testRfcExampleDjangoDumpRequest()
+    {
+        // http.route: ^dump-request$ → /dump-request (after regex stripping)
+        // We test via WordPress normalizer since it handles regex
+        $result = RouteNormalizer::normalizeFromWordPress('^dump-request$');
+        $this->assertSame('/dump-request', $result);
+    }
+
+    public function testRfcExampleFlaskMixedStaticDynamic()
+    {
+        // http.route: /users/user-<id> → /users/{id}
+        // Flask wraps static+dynamic in same segment; normalizer drops static prefix
+        $result = RouteNormalizer::normalizeFromLaravel('/users/{id}');
+        $this->assertSame('/users/{id}', $result);
+    }
+
+    public function testRfcExampleRailsMandatoryFormat()
+    {
+        // http.route: /photos/:id.:format → /photos/{id+format}
+        $result = RouteNormalizer::normalizeFromCakePHP('/photos/:id.:format');
+        $this->assertSame('/photos/{id+format}', $result);
+    }
+
+    public function testRfcExampleGoGorilla()
+    {
+        // http.route: /v2/{name:[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]}/blobs
+        $result = RouteNormalizer::normalizeFromSlim('/v2/{name:[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]}/blobs');
+        $this->assertSame('/v2/{name}/blobs', $result);
+    }
+
+    public function testRfcExampleRailsOptionalFormatPresent()
+    {
+        // /posts/:id(.:format) with format present → /posts/{id+format}
+        $result = RouteNormalizer::normalizeFromLaminas('/posts/:id[.:format]', ['id' => '1', 'format' => 'json']);
+        $this->assertSame('/posts/{id+format}', $result);
+    }
+
+    public function testRfcExampleRailsOptionalFormatAbsent()
+    {
+        // /posts/:id(.:format) without format → /posts/{id}
+        $result = RouteNormalizer::normalizeFromLaminas('/posts/:id[.:format]', ['id' => '1']);
+        $this->assertSame('/posts/{id}', $result);
+    }
+}
diff --git a/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json b/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json
index 94f4baa203..fce7aa85a4 100644
--- a/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json
+++ b/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json
@@ -13,6 +13,7 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "health_check/ping",
+      "_dd.appsec.normalized_route": "/health_check/ping",
       "http.status_code": "200",
       "http.url": "http://localhost/health_check/ping",
       "runtime-id": "ca127e85-a20d-46aa-b510-07e9077a14c9",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json
index 1da3301fe8..97202ca6fb 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json
@@ -14,6 +14,7 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "parameterized/(:any)",
+      "_dd.appsec.normalized_route": "/parameterized/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/parameterized/paramValue",
       "runtime-id": "26ab24e6-051f-4e1f-9adf-3d609bef6946",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json
index 6f87498651..bfc1072c2a 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json
@@ -14,6 +14,7 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "26ab24e6-051f-4e1f-9adf-3d609bef6946",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json
index 5170c9dbe3..8fa1be20b5 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json
@@ -13,6 +13,7 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "does_not_exist",
+      "_dd.appsec.normalized_route": "/does_not_exist",
       "http.status_code": "404",
       "http.url": "http://localhost/does_not_exist?key=value&<redacted>",
       "runtime-id": "232799b0-3a18-4d64-9c97-4f6b441bb91e",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json
index c50a1bd1bf..2939c1bed8 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json
@@ -13,6 +13,7 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "does_not_exist",
+      "_dd.appsec.normalized_route": "/does_not_exist",
       "http.status_code": "200",
       "http.url": "http://localhost/does_not_exist?key=value&<redacted>",
       "runtime-id": "0caac976-2232-42e0-a186-9f73b4c27f50",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json
index c89ca53ba1..f2fde56386 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json
@@ -18,6 +18,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "91489364-94f6-4030-b3ed-5df886a158a0",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json
index 49e57af64c..ace85d9412 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json
@@ -18,6 +18,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "0caac976-2232-42e0-a186-9f73b4c27f50",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json
index f1c4002d99..092ebddb3c 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json
@@ -14,6 +14,7 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "26ab24e6-051f-4e1f-9adf-3d609bef6946",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json
index fb342972d7..f1d5e75c6b 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json
@@ -14,6 +14,7 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "exits",
+      "_dd.appsec.normalized_route": "/exits",
       "http.status_code": "200",
       "http.url": "http://localhost/exits",
       "runtime-id": "de8ed04e-02e4-40ef-be2a-20aeeb1398ef",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
index 781cebdb29..395db3b805 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
@@ -12,6 +12,7 @@
       "component": "laminas",
       "http.method": "POST",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
+      "_dd.appsec.normalized_route": "/datadog-rest-service",
       "http.status_code": "201",
       "http.url": "http://localhost/datadog-rest-service",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
index bcd9fe5695..cb4e8df27b 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
@@ -12,6 +12,7 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
+      "_dd.appsec.normalized_route": "/datadog-rest-service",
       "http.status_code": "405",
       "http.url": "http://localhost/datadog-rest-service/1",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
index b12796c239..b13327c7b8 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
@@ -16,6 +16,7 @@
       "error.type": "Error",
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
+      "_dd.appsec.normalized_route": "/datadog-rest-service",
       "http.status_code": "500",
       "http.url": "http://localhost/datadog-rest-service/42",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json
index 1bdb15085f..54850a8a70 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json
@@ -12,6 +12,7 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple[/:key][/:pwd]",
+      "_dd.appsec.normalized_route": "/simple",
       "laminas.route.name": "simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json
index 378a177110..891908b444 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json
@@ -16,6 +16,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "/error[/:key][/:pwd]",
+      "_dd.appsec.normalized_route": "/error",
       "laminas.route.name": "error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json
index 2d16a69aa4..601c5b1924 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json
@@ -12,6 +12,7 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple_view[/:key][/:pwd]",
+      "_dd.appsec.normalized_route": "/simple_view",
       "laminas.route.name": "simpleView",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json
index 1095152bce..b789c970e7 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple[/:key][/:pwd]",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json
index b7e009b663..fe7fccb895 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "/error[/:key][/:pwd]",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json
index 901042e3de..b0b11348c6 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple_view[/:key][/:pwd]",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json
index 30a75fbd36..89f152f852 100644
--- a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json
+++ b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json
@@ -36,6 +36,7 @@
          "env": "local-test",
          "http.method": "GET",
          "http.route": "simple",
+         "_dd.appsec.normalized_route": "/simple",
          "http.status_code": "200",
          "http.url": "http://localhost/simple?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json
index 1d07dbb615..cab7e2f236 100644
--- a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json
@@ -44,6 +44,7 @@
          "error.type": "Exception",
          "http.method": "GET",
          "http.route": "error",
+         "_dd.appsec.normalized_route": "/error",
          "http.status_code": "500",
          "http.url": "http://localhost/error?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json
index 8a232b9230..d5258d457d 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json
index 8f1d421bec..de30ef1d7f 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json
index ac0e27db47..93a4818e62 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "ignored_exception",
+      "_dd.appsec.normalized_route": "/ignored_exception",
       "http.status_code": "500",
       "http.url": "http://localhost/ignored_exception?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@ignored_exception",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json
index 2f0e9cc11a..61b5dc998c 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json
index b272893f43..1a8fcb1ca3 100644
--- a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json
+++ b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json
@@ -41,6 +41,7 @@
          "http.request.headers.x-dd-proxy-request-time-ms": "1739261376000",
          "http.request.headers.x-dd-proxy-stage": "aws-prod",
          "http.route": "simple",
+         "_dd.appsec.normalized_route": "/simple",
          "http.status_code": "200",
          "http.url": "http://localhost/simple?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json
index 419fe5954d..70fc8fc131 100644
--- a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json
@@ -49,6 +49,7 @@
          "http.request.headers.x-dd-proxy-request-time-ms": "1739261376000",
          "http.request.headers.x-dd-proxy-stage": "aws-prod",
          "http.route": "error",
+         "_dd.appsec.normalized_route": "/error",
          "http.status_code": "500",
          "http.url": "http://localhost/error?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json
index 4f0313c6f4..d9cdc8ec82 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json
index 83bad2e3d5..873d1872a2 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json
index 3233a40a35..fb9482ebd8 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "ignored_exception",
+      "_dd.appsec.normalized_route": "/ignored_exception",
       "http.status_code": "408",
       "http.url": "http://localhost/ignored_exception?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@ignored_exception",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json
index 112ac020a3..4f9f5b699b 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json
index 129eb9bf54..390c85885a 100644
--- a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json
index 2099de6018..a445e4875c 100644
--- a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json
index 680f92fc80..bd6031cd01 100644
--- a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json
index 22efd53562..2d6ac0c4bb 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "dynamic_route/{param01}/static/{param02?}",
+      "_dd.appsec.normalized_route": "/dynamic_route/{param01}/static/{param02}",
       "http.status_code": "200",
       "http.url": "http://localhost/dynamic_route/dynamic01/static/dynamic02",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@dynamicRoute",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json
index 70b03dbba7..032bf611c9 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json
index 2934d7bfe6..3ee7c0576c 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json
index 20a7a2d853..f3c5e198fe 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json
index 3e1774ade8..5e9c5e4635 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "dynamic_route/{param01}/static/{param02?}",
+      "_dd.appsec.normalized_route": "/dynamic_route/{param01}/static/{param02}",
       "http.status_code": "200",
       "http.url": "http://localhost/dynamic_route/dynamic01/static/dynamic02",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@dynamicRoute",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json
index ede2a71d26..3ff3e63d55 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json
index bd6e68a2a2..c0ea78043e 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json
index e6dd0b6f68..170f307d40 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json
index e2ee39ae9c..a30102ddd3 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "dynamic_route/{param01}/static/{param02?}",
+      "_dd.appsec.normalized_route": "/dynamic_route/{param01}/static/{param02}",
       "http.status_code": "200",
       "http.url": "http://localhost/dynamic_route/dynamic01/static/dynamic02",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@dynamicRoute",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json
index 1ad5cb004a..091d23af98 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json
index 0d1c1ee654..056926e484 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json
index de7b4288e7..6f765f19df 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json b/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json
index 66ee49f491..668f86f62c 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "queue/broadcast",
+      "_dd.appsec.normalized_route": "/queue/broadcast",
       "http.status_code": "200",
       "http.url": "http://localhost/queue/broadcast",
       "laravel.route.action": "App\\Http\\Controllers\\QueueTestController@broadcast",
diff --git a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json
index 01e28d6b43..a3ee9d2007 100644
--- a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
+      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json
index c822b1957a..171e7435f4 100644
--- a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
+      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json
index 34138c0c85..0f35b0875e 100644
--- a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
+      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index a94467e5ad..4a0424e5fc 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 942275e999..1cd0231837 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index 4cea0bce0d..74b6b4c2b0 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "(.?.+?)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
index 34e87afcbd..81014c33ef 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
index ad6b699998..40cddd8117 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
index 3da297ba27..778f8d9209 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "(.?.+?)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 5fe007192c..0c1c4d7447 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 323e0bbfd2..d72ec1acfd 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index f74b08cfaf..cb7425d421 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
index b2cc305f4f..2d967a4883 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
index 310b142ac5..b283c6044c 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
index ca8d5fe134..0568c99e74 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index ebfef74a26..46e6fbaa20 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 27319620a3..bd2e2440b1 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index 683d022d4e..f8cf650696 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
index a2f281d70d..643b28cd51 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
index c982920760..abbd529ddf 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
index 671eb3f7d1..c7c1aa69e1 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index d965665100..20ca8883a6 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 10673208e8..75cb2133a2 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index e055001b0c..1fad3089c0 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
index cfbeb419d9..55bd806fdb 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
index 76919c4227..d20cc4a0e2 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,6 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
index 4b9c200068..2c0aced29d 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,6 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
+      "_dd.appsec.normalized_route": "/{param1}/{param2}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",

From d2c0af961efc0eb699fd70f5814e2a10ef724943 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 12 Aug 2026 15:58:59 +0200
Subject: [PATCH 02/54] Fix pipeline errors

---
 src/DDTrace/Util/RouteNormalizer.php          | 24 +++++++++----------
 .../CakePHP/V2_8/CommonScenariosTest.php      |  4 ++++
 .../CakePHP/V3_10/CommonScenariosTest.php     |  4 ++++
 .../Laravel/V4/CommonScenariosTest.php        |  3 +++
 .../Slim/V3_12/CommonScenariosTest.php        |  4 ++++
 .../Symfony/V4_4/CommonScenariosTest.php      |  3 +++
 .../Symfony/V5_0/CommonScenariosTest.php      |  3 +++
 .../Symfony/V5_1/CommonScenariosTest.php      |  3 +++
 .../Symfony/V5_2/CommonScenariosTest.php      |  3 +++
 .../Symfony/V6_2/CommonScenariosTest.php      |  3 +++
 .../Symfony/V7_3/CommonScenariosTest.php      |  3 +++
 tests/api/Unit/UserAvailableConstantsTest.php |  1 +
 ...est.messenger_test.test_async_failure.json |  1 +
 ...est.messenger_test.test_async_success.json |  1 +
 ...async_with_tracer_disabled_on_consume.json |  1 +
 ...4_4.messenger_test.test_async_failure.json |  1 +
 ...4_4.messenger_test.test_async_success.json |  1 +
 ...async_with_tracer_disabled_on_consume.json |  1 +
 ...5_2.messenger_test.test_async_failure.json |  1 +
 ...5_2.messenger_test.test_async_success.json |  1 +
 ...async_with_tracer_disabled_on_consume.json |  1 +
 ...6_2.messenger_test.test_async_failure.json |  1 +
 ...6_2.messenger_test.test_async_success.json |  1 +
 ...async_with_tracer_disabled_on_consume.json |  1 +
 ...7_3.messenger_test.test_async_failure.json |  1 +
 ...7_3.messenger_test.test_async_success.json |  1 +
 ...async_with_tracer_disabled_on_consume.json |  1 +
 27 files changed, 61 insertions(+), 12 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index a613ac0eca..d1e94ffa27 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -25,7 +25,7 @@ class RouteNormalizer
      * @param array  $matchedParams  Parameters from $route->parameters(); used to resolve optionals
      * @return string|null Normalized route, or null on parse failure
      */
-    public static function normalizeFromLaravel(string $routeUri, array $matchedParams = []): ?string
+    public static function normalizeFromLaravel(string $routeUri, array $matchedParams = [])
     {
         return self::normalizeBraceRoute($routeUri, $matchedParams);
     }
@@ -40,7 +40,7 @@ public static function normalizeFromLaravel(string $routeUri, array $matchedPara
      * @param array  $matchedParams Matched params from $route->getArguments(); resolves optionals
      * @return string|null
      */
-    public static function normalizeFromSlim(string $pattern, array $matchedParams = []): ?string
+    public static function normalizeFromSlim(string $pattern, array $matchedParams = [])
     {
         return self::normalizeBraceRoute($pattern, $matchedParams, true);
     }
@@ -53,7 +53,7 @@ public static function normalizeFromSlim(string $pattern, array $matchedParams =
      * @param string $path Path template, e.g. "/users/{id}"
      * @return string|null
      */
-    public static function normalizeFromSymfony(string $path): ?string
+    public static function normalizeFromSymfony(string $path)
     {
         return self::normalizeBraceRoute($path, []);
     }
@@ -69,7 +69,7 @@ public static function normalizeFromSymfony(string $path): ?string
      * @param array  $matchedParams Matched params from $routeMatch->getParams()
      * @return string|null
      */
-    public static function normalizeFromLaminas(string $template, array $matchedParams = []): ?string
+    public static function normalizeFromLaminas(string $template, array $matchedParams = [])
     {
         $expanded = self::expandBracketOptionals($template, $matchedParams, ':');
         // Convert wildcard segments ('*') to a {param} placeholder before brace conversion
@@ -86,7 +86,7 @@ public static function normalizeFromLaminas(string $template, array $matchedPara
      * @param string $template Template from $app->template, e.g. "/articles/:id.:ext"
      * @return string|null
      */
-    public static function normalizeFromCakePHP(string $template): ?string
+    public static function normalizeFromCakePHP(string $template)
     {
         $braceFormat = self::cakephpToBraces($template);
         return self::normalizeBraceRoute($braceFormat, []);
@@ -101,7 +101,7 @@ public static function normalizeFromCakePHP(string $template): ?string
      * @param string $routePath Path from Url::toRoute() with colon placeholders
      * @return string|null
      */
-    public static function normalizeFromYii(string $routePath): ?string
+    public static function normalizeFromYii(string $routePath)
     {
         $braceFormat = self::colonParamsToBraces($routePath);
         return self::normalizeBraceRoute($braceFormat, []);
@@ -116,7 +116,7 @@ public static function normalizeFromYii(string $routePath): ?string
      * @param string $route Route key from $router->routes, e.g. "blog/(:num)"
      * @return string|null
      */
-    public static function normalizeFromCodeIgniter(string $route): ?string
+    public static function normalizeFromCodeIgniter(string $route)
     {
         $route = trim($route, '/');
         if ($route === '') {
@@ -157,7 +157,7 @@ public static function normalizeFromCodeIgniter(string $route): ?string
      * @param string $matchedRule Value of $wp->matched_rule
      * @return string|null
      */
-    public static function normalizeFromWordPress(string $matchedRule): ?string
+    public static function normalizeFromWordPress(string $matchedRule)
     {
         $rule = $matchedRule;
 
@@ -261,13 +261,13 @@ private static function normalizeBraceRoute(
         string $route,
         array $matchedParams,
         bool $expandSquare = false
-    ): ?string {
+    ) {
         $route = trim($route);
         if ($route === '' || $route === '/') {
             return '/';
         }
 
-        $trailingSlash = (strlen($route) > 1 && $route[-1] === '/') ? '/' : '';
+        $trailingSlash = (strlen($route) > 1 && substr($route, -1) === '/') ? '/' : '';
         $route = rtrim($route, '/');
 
         if ($route[0] !== '/') {
@@ -304,7 +304,7 @@ private static function normalizeBraceRoute(
      *
      * @return string|null The normalized element, or null if the segment is optional and absent
      */
-    private static function normalizeBraceSegment(string $segment, array $matchedParams): ?string
+    private static function normalizeBraceSegment(string $segment, array $matchedParams)
     {
         preg_match_all('/\{([^}]+)\}/', $segment, $matches, PREG_SET_ORDER);
 
@@ -316,7 +316,7 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
         foreach ($matches as $match) {
             $raw = $match[1];
 
-            $isOptional = ($raw[-1] === '?');
+            $isOptional = (substr($raw, -1) === '?');
             if ($isOptional) {
                 $raw = substr($raw, 0, -1);
             }
diff --git a/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php b/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php
index 506df7debe..73640dd8ba 100644
--- a/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php
+++ b/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php
@@ -58,6 +58,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/:controller',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -84,6 +85,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/:controller',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -119,6 +121,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
                         'http.route' => '/:controller',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withExistingTagsNames([
@@ -161,6 +164,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/parameterized/paramValue',
                         'http.status_code' => '200',
                         'http.route' => '/parameterized/:param',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
diff --git a/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php b/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php
index 76a6440d44..af0184198e 100644
--- a/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php
+++ b/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php
@@ -59,6 +59,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/{controller}',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -85,6 +86,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/{controller}',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -120,6 +122,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
                         'http.route' => '/{controller}',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withExistingTagsNames([
@@ -162,6 +165,7 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/parameterized/paramValue',
                         'http.status_code' => '200',
                         'http.route' => '/parameterized/:param',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
diff --git a/tests/Integrations/Laravel/V4/CommonScenariosTest.php b/tests/Integrations/Laravel/V4/CommonScenariosTest.php
index 122a694717..b5f6fa4846 100644
--- a/tests/Integrations/Laravel/V4/CommonScenariosTest.php
+++ b/tests/Integrations/Laravel/V4/CommonScenariosTest.php
@@ -57,6 +57,7 @@ public function provideSpecs()
                             'http.url' => 'http://localhost/simple?key=value&<redacted>',
                             'http.status_code' => '200',
                             'http.route' => 'simple',
+                            Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                             'some.key1' => 'value',
                             'some.key2' => 'value2',
                             TAG::SPAN_KIND => 'server',
@@ -149,6 +150,7 @@ public function provideSpecs()
                             'http.url' => 'http://localhost/error?key=value&<redacted>',
                             'http.status_code' => '500',
                             'http.route' => 'error',
+                            Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                             'some.key1' => 'value',
                             'some.key2' => 'value2',
                             TAG::SPAN_KIND => 'server',
@@ -199,6 +201,7 @@ public function provideSpecs()
                             'http.url' => 'http://localhost/dynamic_route/dynamic01/static/dynamic02',
                             'http.status_code' => '200',
                             'http.route' => 'dynamic_route/{param01}/static/{param02?}',
+                            Tag::APPSEC_NORMALIZED_ROUTE => '/dynamic_route/{param01}/static/{param02}',
                             'some.key1' => 'value',
                             'some.key2' => 'value2',
                             TAG::SPAN_KIND => 'server',
diff --git a/tests/Integrations/Slim/V3_12/CommonScenariosTest.php b/tests/Integrations/Slim/V3_12/CommonScenariosTest.php
index b97d16527f..8509d73fd8 100644
--- a/tests/Integrations/Slim/V3_12/CommonScenariosTest.php
+++ b/tests/Integrations/Slim/V3_12/CommonScenariosTest.php
@@ -59,6 +59,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         SpanAssertion::build(
                             'slim.route.controller',
@@ -84,6 +85,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         SpanAssertion::build(
                             'slim.route.controller',
@@ -119,6 +121,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])->setError(null, null)
                         ->withChildren([
                             SpanAssertion::build(
@@ -147,6 +150,7 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/parameterized/{value}',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{value}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'slim.route.controller',
diff --git a/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php b/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php
index 67aa59f88e..7b14922710 100644
--- a/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php
@@ -56,6 +56,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -97,6 +98,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -145,6 +147,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php b/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php
index 88ae9321a3..b7bfd5a222 100644
--- a/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php
@@ -56,6 +56,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -97,6 +98,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -145,6 +147,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php b/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php
index 66558d8259..d53ab79678 100644
--- a/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php
@@ -56,6 +56,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -97,6 +98,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -145,6 +147,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php b/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php
index b3df1fbe33..9043861731 100644
--- a/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php
@@ -56,6 +56,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -95,6 +96,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -141,6 +143,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php b/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php
index 09c7927a95..4dd7b39311 100644
--- a/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php
@@ -56,6 +56,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -95,6 +96,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -141,6 +143,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php b/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php
index 9d80fac281..6b71b4139f 100644
--- a/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php
@@ -69,6 +69,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -108,6 +109,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -154,6 +156,7 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/api/Unit/UserAvailableConstantsTest.php b/tests/api/Unit/UserAvailableConstantsTest.php
index 0df908057d..91a89d1306 100644
--- a/tests/api/Unit/UserAvailableConstantsTest.php
+++ b/tests/api/Unit/UserAvailableConstantsTest.php
@@ -186,6 +186,7 @@ public function tags()
             [Tag::EXEC_CMDLINE_SHELL, 'cmd.shell'],
             [Tag::EXEC_TRUNCATED, 'cmd.truncated'],
             [Tag::EXEC_EXIT_CODE, 'cmd.exit_code'],
+            [Tag::APPSEC_NORMALIZED_ROUTE, '_dd.appsec.normalized_route'],
         ];
     }
 
diff --git a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json
index f57a677294..8a685d109e 100644
--- a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
+      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "0f36db1f-90a1-409a-9b85-7d0bc2c54d36",
diff --git a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json
index 380f76930f..bb43acbd09 100644
--- a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "0f36db1f-90a1-409a-9b85-7d0bc2c54d36",
diff --git a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json
index 197943a03a..8cbea890d9 100644
--- a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "0f36db1f-90a1-409a-9b85-7d0bc2c54d36",
diff --git a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json
index d5149dfdc8..2cd1b9dc59 100644
--- a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
+      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "ca852dce-8c96-4b3f-8357-2b46cce83f8d",
diff --git a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json
index 022b59c7af..c23f76a73a 100644
--- a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "ca852dce-8c96-4b3f-8357-2b46cce83f8d",
diff --git a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json
index d4041b3169..b212dfc624 100644
--- a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "ca852dce-8c96-4b3f-8357-2b46cce83f8d",
diff --git a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json
index b855eb677e..cc9f7d5392 100644
--- a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
+      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "1550b663-0773-449e-8a5f-22376e62447d",
diff --git a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json
index 98689bf55a..61f46f02b9 100644
--- a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "1550b663-0773-449e-8a5f-22376e62447d",
diff --git a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
index 63c6603940..bc0c8fb41a 100644
--- a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "1550b663-0773-449e-8a5f-22376e62447d",
diff --git a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json
index 2f7394d7f4..7d3f4028b2 100644
--- a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
+      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "8d575e05-da62-4382-a61a-a3c04f3e8cad",
diff --git a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json
index 1ae71e1e12..3f1a8a49aa 100644
--- a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "8d575e05-da62-4382-a61a-a3c04f3e8cad",
diff --git a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
index 96256186c7..47ece10b90 100644
--- a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "8d575e05-da62-4382-a61a-a3c04f3e8cad",
diff --git a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json
index ac008361f1..ffe507c94f 100644
--- a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
+      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "20ef259c-a7ba-47ab-8ea5-bff0fefacb1d",
diff --git a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json
index b4ea6c6493..1b3cbdf756 100644
--- a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "20ef259c-a7ba-47ab-8ea5-bff0fefacb1d",
diff --git a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json
index 0327d98741..f60f2960cf 100644
--- a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,6 +13,7 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
+      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "20ef259c-a7ba-47ab-8ea5-bff0fefacb1d",

From aa90d45812a0cbd2ee6e9a24e516ab6f482031f3 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 12 Aug 2026 17:15:36 +0200
Subject: [PATCH 03/54] test: add APPSEC_NORMALIZED_ROUTE assertions to
 remaining test files

Add missing Tag::APPSEC_NORMALIZED_ROUTE assertions to:
- Symfony TraceSearchConfigTest (V4_4, V5_0, V5_1, V5_2, V6_2)
- Laravel TraceSearchConfigTest (V4, V5_7, V5_8, V8_x)
- Laravel V8_x RouteCachingTest and InternalExceptionsTest
- Laravel Octane CommonScenariosTest
- Yii ParameterizedRouteTest, ModuleTest, LazyLoadingIntegrationsFromYiiTest
- CodeIgniter ExitTest and NoCI_ControllertTest
- Fix UserAvailableConstantsTest tag ordering (APPSEC_NORMALIZED_ROUTE
  must appear after HTTP_ROUTE to match Tag.php declaration order)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 tests/Integrations/CodeIgniter/V2_2/ExitTest.php               | 3 ++-
 tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php   | 1 +
 .../Integrations/Laravel/Octane/Latest/CommonScenariosTest.php | 3 +++
 tests/Integrations/Laravel/V4/TraceSearchConfigTest.php        | 1 +
 tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php      | 1 +
 tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php      | 1 +
 tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php     | 2 ++
 tests/Integrations/Laravel/V8_x/RouteCachingTest.php           | 2 ++
 tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php      | 1 +
 tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php      | 1 +
 tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php      | 1 +
 tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php      | 1 +
 tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php      | 1 +
 tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php      | 1 +
 .../Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php          | 1 +
 tests/Integrations/Yii/Latest/ModuleTest.php                   | 1 +
 tests/Integrations/Yii/Latest/ParameterizedRouteTest.php       | 1 +
 tests/api/Unit/UserAvailableConstantsTest.php                  | 2 +-
 18 files changed, 23 insertions(+), 2 deletions(-)

diff --git a/tests/Integrations/CodeIgniter/V2_2/ExitTest.php b/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
index c7d0603228..78f97fbd72 100644
--- a/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
@@ -43,7 +43,8 @@ public function testScenario()
                     'app.endpoint' => 'Exits::index',
                     Tag::SPAN_KIND => 'server',
                     Tag::COMPONENT => 'codeigniter',
-                    Tag::HTTP_ROUTE => 'exits'
+                    Tag::HTTP_ROUTE => 'exits',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/exits',
                 ])->withChildren([
                     SpanAssertion::build(
                         'Exits.index',
diff --git a/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php b/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php
index ebdee1225e..6cc6b584ec 100644
--- a/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php
@@ -43,6 +43,7 @@ public function testScenario()
                     Tag::SPAN_KIND => 'server',
                     Tag::COMPONENT => 'codeigniter',
                     Tag::HTTP_ROUTE => 'health_check/ping',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/health_check/ping',
                 ])->withChildren([
                     SpanAssertion::build(
                         'Health_check.ping',
diff --git a/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php b/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php
index a787ff2574..a6c5489b50 100644
--- a/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php
@@ -102,6 +102,7 @@ public function testScenarioGetReturnString()
                 Tag::HTTP_METHOD => 'GET',
                 Tag::HTTP_URL => 'http://localhost/simple?key=value&<redacted>',
                 Tag::HTTP_ROUTE => 'simple',
+                Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                 Tag::HTTP_STATUS_CODE => '200',
                 Tag::SPAN_KIND => 'server',
                 Tag::COMPONENT => 'laravel',
@@ -174,6 +175,7 @@ public function testScenarioGetWithView()
                 Tag::HTTP_METHOD => 'GET',
                 Tag::HTTP_URL => 'http://localhost/simple_view?key=value&<redacted>',
                 Tag::HTTP_ROUTE => 'simple_view',
+                Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                 Tag::HTTP_STATUS_CODE => '200',
                 Tag::SPAN_KIND => 'server',
                 Tag::COMPONENT => 'laravel',
@@ -263,6 +265,7 @@ public function testScenarioGetWithException()
                 Tag::HTTP_METHOD => 'GET',
                 Tag::HTTP_URL => 'http://localhost/error?key=value&<redacted>',
                 Tag::HTTP_ROUTE => 'error',
+                Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                 Tag::HTTP_STATUS_CODE => '500',
                 Tag::SPAN_KIND => 'server',
                 Tag::COMPONENT => 'laravel',
diff --git a/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php
index 3109b07dde..4e9503f841 100644
--- a/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php
@@ -44,6 +44,7 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php
index 402c38eab8..80ece12dd9 100644
--- a/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php
@@ -49,6 +49,7 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php
index 3d8fd4681e..69b60c54ea 100644
--- a/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php
@@ -49,6 +49,7 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php b/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php
index 8441164c14..e36a8fd2cc 100644
--- a/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php
+++ b/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php
@@ -46,6 +46,7 @@ public function testNotImplemented()
                         'http.url' => 'http://localhost/not-implemented',
                         'http.status_code' => '501',
                         'http.route' => 'not-implemented',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/not-implemented',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
@@ -109,6 +110,7 @@ public function testUnauthorized()
                         'http.url' => 'http://localhost/unauthorized',
                         'http.status_code' => '403',
                         'http.route' => 'unauthorized',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/unauthorized',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V8_x/RouteCachingTest.php b/tests/Integrations/Laravel/V8_x/RouteCachingTest.php
index bd32474fc5..439caf00ea 100644
--- a/tests/Integrations/Laravel/V8_x/RouteCachingTest.php
+++ b/tests/Integrations/Laravel/V8_x/RouteCachingTest.php
@@ -45,6 +45,7 @@ public function testNotCached()
                         'http.url' => 'http://localhost/unnamed-route',
                         'http.status_code' => '200',
                         'http.route' => 'unnamed-route',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/unnamed-route',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
@@ -94,6 +95,7 @@ public function testCached()
                         'http.url' => 'http://localhost/unnamed-route',
                         'http.status_code' => '200',
                         'http.route' => 'unnamed-route',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/unnamed-route',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php
index 0d76259fbc..849acf0f3f 100644
--- a/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php
@@ -49,6 +49,7 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
+                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php
index ccf749e2c2..66635c56d1 100644
--- a/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php
@@ -43,6 +43,7 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php
index 7c9cbfee07..54b312ba43 100644
--- a/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php
@@ -43,6 +43,7 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php
index 5044eafd65..cb489e54d7 100644
--- a/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php
@@ -43,6 +43,7 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php
index 1a622ae42b..57fa72db8d 100644
--- a/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php
@@ -43,6 +43,7 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php
index aaf2f4acc8..7a9d8e90a1 100644
--- a/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php
@@ -43,6 +43,7 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php b/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php
index 7f78b32737..7059955484 100644
--- a/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php
+++ b/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php
@@ -44,6 +44,7 @@ public function testRootIndexRoute()
                     Tag::HTTP_STATUS_CODE => '200',
                     'app.route.path' => '/site/index',
                     Tag::HTTP_ROUTE => '/site/index',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/site/index',
                     'app.endpoint' => 'app\controllers\SiteController::actionIndex',
                     Tag::SPAN_KIND => "server",
                     Tag::COMPONENT => "yii",
diff --git a/tests/Integrations/Yii/Latest/ModuleTest.php b/tests/Integrations/Yii/Latest/ModuleTest.php
index 8cadc7e3b8..201297d691 100644
--- a/tests/Integrations/Yii/Latest/ModuleTest.php
+++ b/tests/Integrations/Yii/Latest/ModuleTest.php
@@ -43,6 +43,7 @@ public function testGet()
                     Tag::HTTP_STATUS_CODE => '200',
                     'app.route.path' => '/forum/:state/:city/:neighborhood',
                     Tag::HTTP_ROUTE => '/forum/:state/:city/:neighborhood',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/forum/{state}/{city}/{neighborhood}',
                     'app.endpoint' => 'app\modules\forum\controllers\ModuleController::actionView',
                     Tag::SPAN_KIND => "server",
                     Tag::COMPONENT => "yii",
diff --git a/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php b/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php
index 82a4af944c..e5076bea22 100644
--- a/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php
+++ b/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php
@@ -43,6 +43,7 @@ public function testGet()
                     Tag::HTTP_STATUS_CODE => '200',
                     'app.route.path' => '/homes/:state/:city/:neighborhood',
                     Tag::HTTP_ROUTE => '/homes/:state/:city/:neighborhood',
+                    Tag::APPSEC_NORMALIZED_ROUTE => '/homes/{state}/{city}/{neighborhood}',
                     'app.endpoint' => 'app\controllers\HomesController::actionView',
                     Tag::SPAN_KIND => "server",
                     Tag::COMPONENT => "yii",
diff --git a/tests/api/Unit/UserAvailableConstantsTest.php b/tests/api/Unit/UserAvailableConstantsTest.php
index 91a89d1306..d2174d9810 100644
--- a/tests/api/Unit/UserAvailableConstantsTest.php
+++ b/tests/api/Unit/UserAvailableConstantsTest.php
@@ -110,6 +110,7 @@ public function tags()
             [Tag::ERROR_STACK, 'error.stack'],
             [Tag::HTTP_METHOD, 'http.method'],
             [Tag::HTTP_ROUTE, 'http.route'],
+            [Tag::APPSEC_NORMALIZED_ROUTE, '_dd.appsec.normalized_route'],
             [Tag::HTTP_STATUS_CODE, 'http.status_code'],
             [Tag::HTTP_URL, 'http.url'],
             [Tag::HTTP_VERSION, 'http.version'],
@@ -186,7 +187,6 @@ public function tags()
             [Tag::EXEC_CMDLINE_SHELL, 'cmd.shell'],
             [Tag::EXEC_TRUNCATED, 'cmd.truncated'],
             [Tag::EXEC_EXIT_CODE, 'cmd.exit_code'],
-            [Tag::APPSEC_NORMALIZED_ROUTE, '_dd.appsec.normalized_route'],
         ];
     }
 

From 0e0d7ad5257657b64615cd1b5d8e12dfe6e39c58 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 13 Aug 2026 10:16:39 +0200
Subject: [PATCH 04/54] Fix laminas

---
 normal-extension-test.xml                     | 1698 +++++++++--------
 .../Laminas/LaminasIntegration.php            |    3 +-
 src/DDTrace/Util/RouteNormalizer.php          |   43 +-
 .../Laminas/ApiTools/Latest/RESTTest.php      |   18 +-
 ...atest.rest_test.test_scenario_rest2xx.json |    2 +-
 ...atest.rest_test.test_scenario_rest4xx.json |    4 +-
 ...atest.rest_test.test_scenario_rest5xx.json |   10 +-
 7 files changed, 972 insertions(+), 806 deletions(-)

diff --git a/normal-extension-test.xml b/normal-extension-test.xml
index 74a153e700..c412a5bb70 100644
--- a/normal-extension-test.xml
+++ b/normal-extension-test.xml
@@ -1,1397 +1,1523 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<testsuites name="php" tests="605" failures="9" errors="0" skip="15" time="438.5129">
-<testsuite name="php.tmp.build_extension.tests.ext.sandbox.install_hook" tests="29" failures="0" errors="0" skip="2" time="0.5153">
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_retval.phpt (Overriding function return value via install_hook())' time='0.0201'>
+<testsuites name="PHP" tests="694" failures="2" errors="0" skip="18" time="374.4929">
+<testsuite name="PHP.tmp.build_extension.tests.ext" tests="173" failures="1" errors="0" skip="3" time="10.3395">
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_default.phpt (Test dd_trace_check_memory_under_limit() returning correct values for default)' time='0.0172'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/test_special_attributes_bis.phpt (Reserved OTel attributes that have special meaning)' time='0.0209'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_header_to_meta.phpt (Headers values are mapped to expected tag key)' time='0.0219'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_low_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0361'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/start_span_without_closing_autofinish.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0192'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/do_not_check_if_class_or_function_exists_by_default.phpt (Do not throw exceptions when veryfying if class/method and function exists.)' time='0.0139'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_success_07.phpt (Test \datadog\appsec\v2\track_user_login_success no user id or metadata given)' time='0.0167'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/svc_auto_tag_cli.phpt (Process tags include svc.auto:&lt;default&gt; when DD_SERVICE is unset (CLI))' time='0.0183'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0144'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/read_c_configuration.phpt (Ensure we can read C configuration data)' time='0.0141'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_03.phpt (URL without host part in referrer)' time='0.0201'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_get_link.phpt (DDTrace\SpanData::getLink basic functionality)' time='0.0147'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_jit_tags.phpt ([crasht] opcache tags are attached to crash report)' time='0.22'>
+<failure type='FAILED' message=''>001+ Segmentation fault
+     %A{
+         &quot;message&quot;: {
+005+         &quot;kind&quot;: &quot;UnixSignal&quot;,
+006+         &quot;message&quot;: &quot;Crashtracker crash ping: crash processing started - Process terminated with SI_USER (SIGSEGV)&quot;,
+007+         &quot;siginfo&quot;: {
+008+             &quot;si_addr&quot;: &quot;0x00000d6a00007e11&quot;,
+009+             &quot;si_code&quot;: 0,
+010+             &quot;si_code_human_readable&quot;: &quot;SI_USER&quot;,
+011+             &quot;si_signo&quot;: 11,
+012+             &quot;si_signo_human_readable&quot;: &quot;SIGSEGV&quot;
+013+         },
+014+         &quot;version&quot;: &quot;1.0&quot;,
+             &quot;metadata&quot;: {
+                 &quot;library_name&quot;: &quot;dd-trace-php&quot;,
+                 &quot;library_version&quot;: &quot;%s&quot;,
+                 &quot;family&quot;: &quot;php&quot;,
+                 &quot;tags&quot;: [
+                     &quot;php.opcache.enable_cli:1&quot;,
+010-                 &quot;php.opcache.jit_buffer_size:32M&quot;,
+022+                 &quot;env:none&quot;,
+023+                 &quot;service:Standard input code&quot;,
+024+                 &quot;x-datadog-test-session-token:tests\/ext\/crashtracker_segfault.phpt&quot;,
+025+                 &quot;is_crash:true&quot;,
+026+                 &quot;severity:crash&quot;,
+027+                 &quot;library_version:1.23.0&quot;,
+028+                 &quot;language:php&quot;,
+029+                 &quot;runtime:php&quot;,
+030+                 &quot;runtime-id:9c77dab0-d858-49e6-b7ce-c2fb7762654a&quot;,
+031+                 &quot;runtime_version:8.0.30&quot;,
+032+                 &quot;process_tags:entrypoint.name:standard_input_code,entrypoint.type:script,entrypoint.workdir:app,runtime.sapi:cli&quot;
+033+             ]
+034+         }
+035+     },
+036+     &quot;level&quot;: &quot;DEBUG&quot;,
+037+     &quot;count&quot;: 1,
+038+     &quot;stack_trace&quot;: null,
+039+     &quot;tags&quot;: &quot;uuid:81bcd709-f64d-4004-a298-c9f98c044622,is_crash_ping:true,service:Standard input code,language_name:php,language_version:8.0.30,tracer_version:1.23.0,si_code_human_readable:SI_USER,si_signo:11,si_signo_human_readable:SIGSEGV,runtime_platform:aarch64-unknown-linux-gnu,env:none&quot;,
+040+     &quot;is_sensitive&quot;: false,
+012-                 &quot;php.opcache.jit:tracing&quot;,
+     %A
+     }%A</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_precedence.phpt (Ensure the ip header priority is followed)' time='0.0159'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0122'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0123'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/show_actual_active_span_in_hook.phpt (Test hooking preserves the active span)' time='0.0117'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_windows.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='0.0123'>
+<skipped>: test only runs on Windows</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_function.phpt (Tracing Functions via install_hook())' time='0.0209'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_failure_03.phpt (Test \datadog\appsec\v2\track_user_login_failure invalid login)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_file.phpt (Test file inclusion hooking)' time='0.0168'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_05.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0148'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator.phpt (Tracing Closures via install_hook())' time='0.0276'>
+<testcase name='tmp/build_extension/tests/ext/set_user_with_metadata.phpt (Test \DDTrace\set_user with metadata)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args_internal.phpt (Adding additional function arguments on internal functions via install_hook())' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/secure_random_generates_nonzero_ids.phpt (DD_TRACE_SECURE_RANDOM generates valid non-zero span IDs)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.0136'>
-<skipped>: test only stable on PHP &gt;= 8.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation.phpt (Root span with http.url and obfuscated query string)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_exception.phpt (overrideException())' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/ust_precedence_over_ddtags.phpt (Test that individual environment variables take precedence over DD_TAGS)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure.phpt (Tracing Closures via install_hook())' time='0.0271'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_collect_all_threads.phpt (Crashtracker collects all threads when collect_all_threads is enabled)' time='0.3024'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/allow_nested_hook.phpt (allowNestedHook())' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_override_default.phpt (Test \DDTrace\set_user with metadata and with usr.id as a distributed tag)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args.phpt (Overriding function arguments via install_hook())' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_and_backtrace_are_mutually_exclusive.phpt (Settings &#039;datadog.log_backtrace&#039; and &#039;datadog.crashtracking_enabled&#039; are mutually exclusive)' time='0.0243'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_jit.phpt (generator hooking works with JIT)' time='0.0288'>
+<testcase name='tmp/build_extension/tests/ext/force_flush_traces.phpt (Force flush the traces mid-way through a trace)' time='0.0235'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_hook_null_logger.phpt (Remove hook)' time='0.0167'>
+<testcase name='tmp/build_extension/tests/ext/start_span_with_all_properties.phpt (Set DDTrace\start_span() properties)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_generator.phpt (Replacing the return value of a generator instantiation in the begin hook)' time='0.0250'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_x_forwarded_for.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_argument_jit.phpt (overrideArguments() works with JIT (Issue #2174))' time='0.0290'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_only_allowed_params.phpt (Only param whose name is in DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED shouldn&#039;t be redacted)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_scoped_file.phpt (Test class scoped file inclusion hooking)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_reference.phpt (dd_trace_serialize_msgpack() with references)' time='0.0248'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_executing_hook.phpt (Ensure proper interoperability with multiple observers installed on observer removal)' time='0.0247'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_useragent.phpt (Verify the user agent is added to the root span on serialization.)' time='0.0174'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_inherited_constructor.phpt (Test hooking inherited internal constructors via install_hook())' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip.phpt (Verify the client ip is added from the peer IP  when no XFF header is available.)' time='0.0152'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/get_source_file.phpt (Retrieve the filename where the function/method originated from)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/add_global_tag_on_userland_and_internal_spans.phpt (DDTrace\add_global_tag() on all sorts of spans)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/install_hook_return_by_ref.phpt (Test install_hook() on functions returning by reference)' time='0.0254'>
+<testcase name='tmp/build_extension/tests/ext/set_user_without_propagation_override_default.phpt (Test \DDTrace\set_user doesn&#039;t propagate when overriding configuration)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_not_invoked_if_tracer_disabled.phpt (Ensure hooks are not invoked after the tracer has been disabled)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/http_endpoint_resource_renaming_always_simplified.phpt (HTTP endpoint resource renaming with DD_TRACE_RESOURCE_RENAMING_ALWAYS_SIMPLIFIED_ENDPOINT=true)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_default_argument.phpt (Override arguments of a function with default arguments)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_use_first_available_tag.phpt (Use the first available tag from peerServiceSources to set peer.service)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions via install_hook())' time='0.0266'>
+<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_invalid.phpt (Invalid sidecar connection mode falls back to auto)' time='0.0384'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call_jit.phpt (suppressCall() works with JIT)' time='0.0155'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_remapping.phpt (Properly remap peer service&#039;s sources based on DD_TRACE_PEER_SERVICE_MAPPING)' time='0.0156'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.0143'>
-<skipped>: test only stable on PHP &gt;= 8.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/svc_runtime_change.phpt (Changing datadog.service at runtime recomputes svc.user/svc.auto process tags per-span)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_file.phpt (Test file inclusion hooking)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_config.phpt (DD_TRACE_SIDECAR_CONNECTION_MODE configuration parsing)' time='0.0237'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/exclude_inherited_hook.phpt (remove_hook() with class argument)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/retrieve_128_bit_trace_id.phpt (Test 128-bit trace id retrieval)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_from_callable.phpt (Tracing Fake Closures via install_hook())' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_04.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call.phpt (Suppress function call via suppressCall())' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracestate_consumption.phpt (Distributed tracestate consumption should produce valid tracestate header)' time='0.0112'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_callable.phpt (Tracing generic callables via install_hook())' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping_precedence.phpt (http.response.status_code takes precedence over http.status_code)' time='0.0124'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.sandbox.hook_function" tests="32" failures="0" errors="0" skip="0" time="0.5227">
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_01.phpt (DDTrace\hook_function posthook is called with an exception; args are still good)' time='0.0196'>
+<testcase name='tmp/build_extension/tests/ext/otel_propagators_empty_dd_propagation_style.phpt (OTEL_PROPAGATORS fallback uses correct buffer when DD_TRACE_PROPAGATION_STYLE fails to decode)' time='0.0278'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_02.phpt (DDTrace\hook_function prehook is passed the correct args (variadic))' time='0.0175'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_02.phpt (DDTrace\hook_function posthook exception is sandboxed)' time='0.0263'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_disabled.phpt (Don&#039;t send crashtracker report when segmentation fault signal is raised and config disables it)' time='5.1555'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_01.phpt (DDTrace\hook_function posthook basic functionality)' time='0.0321'>
+<testcase name='tmp/build_extension/tests/ext/test_special_attributes.phpt (Reserved OTel attributes that have special meaning)' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_variadic.phpt (DDTrace\hook_function posthook works with variadic functions)' time='0.0261'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_implicit_array_key.phpt (Post fields with a implicit array keys)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/dropping_trace_hook.phpt (Test dropping spans from multiple trace hooks)' time='0.0190'>
+<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_subprocess.phpt (Sidecar connection in subprocess mode)' time='0.0331'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_04.phpt (DDTrace\hook_function posthook exception is sandboxed (debug internal))' time='0.0177'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_success_06.phpt (Test \datadog\appsec\v2\track_user_login_success no user id given)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_01.phpt (DDTrace\hook_function posthook error is sandboxed)' time='0.0195'>
+<testcase name='tmp/build_extension/tests/ext/generate_128_bit_trace_id.phpt (Test 128 bit generation)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/02.phpt (DDTrace\hook_function returns false quietly when no hook is passed)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_0_percent.phpt (Test get_memory_limit() returning correct values)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_04.phpt (DDTrace\hook_function prehook exception is sandboxed (debug internal))' time='0.0161'>
+<testcase name='tmp/build_extension/tests/ext/close_spans_until.phpt (Test DDTrace\close_spans_until)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_03.phpt (DDTrace\hook_function posthook is passed the correct args)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_03.phpt (Client IP should be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_limited_01.phpt (hook_function posthook should ignore limited mode)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/svc_src_manual_override.phpt (Manual override of span service produces _dd.svc_src = &#039;m&#039;)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_03.phpt (DDTrace\hook_function prehook is passed the correct args)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_json_config.phpt (Startup logging config from JSON fetched at runtime)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_02.phpt (DDTrace\hook_function prehook error is sandboxed (debug))' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0176'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_03.phpt (DDTrace\hook_function posthook exception is sandboxed (internal))' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/root_span_security_testing_headers_absent.phpt (Security-testing header tags are absent when headers are not sent)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_02.phpt (DDTrace\hook_function posthook is called at exit (shutdown handler))' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_enabled.phpt (Dump backtrace when segmentation fault signal is raised and config enables it)' time='0.0371'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_01.phpt (DDTrace\hook_function prehook error is sandboxed)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/secure_random_ignores_prng_seed.phpt (DD_TRACE_SECURE_RANDOM bypasses the deterministic PRNG seed)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0144'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_serialization_with_links.phpt (Serialization of a span with multiple span links)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0144'>
+<testcase name='tmp/build_extension/tests/ext/client_side_stats_top_level.phpt (Client-side stats: _dd.top_level metric is set on top-level spans)' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions)' time='0.0266'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param_set.phpt (Empty post request without whitelisting)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_does_not_leak_error.phpt (Check that sandboxed hooks do not invoke error handlers or set the error code)' time='0.0277'>
+<testcase name='tmp/build_extension/tests/ext/otel_http_status_code_remapping.phpt (Remap http.status_code metric to http.status_code meta - OTel HTTP Semantic Convention &lt; 1.21.0)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_variadic.phpt (DDTrace\hook_function prehook works with variadic functions)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_001.phpt (background sender happy path)' time='0.0254'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_02.phpt (DDTrace\hook_function posthook error is sandboxed (debug))' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping.phpt (Remap http.response.status_code to http.status_code - OTel HTTP Semantic Convention &gt;= 1.21.0)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_01.phpt (DDTrace\hook_function prehook exception is sandboxed)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/recursion.phpt (DDTrace\hook_function supports recursion)' time='0.0147'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_disabled_default.phpt (Assesses the opt-in behavior of peer service)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/03.phpt (DDTrace\hook_function returns false with diagnostic when no hook is passed)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation_empty.phpt (Root span with http.url and unobfuscated query string with empty regex)' time='0.0162'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_02.phpt (DDTrace\hook_function posthook is passed the correct args (variadic))' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names_no_host.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED (variant using SERVER_NAME))' time='0.0146'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_01.phpt (DDTrace\hook_function prehook basic functionality)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param.phpt (Empty post request)' time='0.0158'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_02.phpt (DDTrace\hook_function prehook exception is sandboxed (debug))' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_fields.phpt (Post fields parameters should be retrieved and redacted if needed)' time='0.015'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_01.phpt (DDTrace\hook_function posthook is called at exit)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/dropped_spans_have_negative_duration.phpt (Negative duration for dropped spans)' time='0.0156'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/01.phpt (DDTrace\hook_function supports both hooks simultaneously)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_id_in_meta.phpt (dd_trace_serialize_msgpack() properly handles span_id, trace_id and parent_id, but only outside of nested arrays)' time='0.0273'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_03.phpt (DDTrace\hook_function prehook exception is sandboxed (internal))' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_wrong_values.phpt (Using a wrongly formatted DD_TRACE_PEER_SERVICE_MAPPING doesn&#039;t break the tracer)' time='0.013'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.sandbox.prehook" tests="20" failures="0" errors="0" skip="0" time="0.2707">
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_error_log.phpt ([Prehook Regression] Exception in tracing closure gets logged)' time='0.0164'>
+<testcase name='tmp/build_extension/tests/ext/set_user_no_metadata.phpt (Test \DDTrace\set_user with no metadata)' time='0.0163'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/args_copy_before_mutation.phpt ([Prehook] Arguments are copied before mutation can occur)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/request_timeout_01.phpt (A PHP request timeout does not leak/segfault (run with leak detection))' time='1.0348'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_internal.phpt ([Prehook Regression] DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/process_tags.phpt (Process tags are added to root span when enabled)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method.phpt ([Prehook Regression] DDTrace\trace_method() can trace with internal spans)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack.phpt (Basic functionality of dd_trace_serialize_msgpack())' time='0.026'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_handling.phpt ([Prehook Regression] Exceptions get attached to spans)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_unset.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when not set)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_userland.phpt ([Prehook Regression] DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/base_service.phpt (Properly set _dd.base_service when service name is manually changed)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/drop_spans.phpt ([Prehook Regression] Span is dropped when tracing closure returns false)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sidecar_enabled.phpt (Sidecar should be enabled by default on PHP 8.4)' time='0.0141'>
+<skipped>: This tests is only for PHP 8.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_method_access_hook.phpt ([Prehook regression] Private and protected methods are called from a tracing closure)' time='0.0190'>
+<testcase name='tmp/build_extension/tests/ext/ust_via_ddtags.phpt (Test that service tags in DD_TAGS are ignored but version and env tags are set)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exit_and_drop_span.phpt ([Prehook Regression] Exit gracefully handles a dropped span)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/process_tag_value_normalization.phpt (Process tag value normalization)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exceptions_and_errors_are_ignored_in_tracing_closure.phpt ([Prehook Regression] Exceptions and errors are ignored when inside a tracing closure)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_simple_whitelist.phpt (Post fields parameters should be retrieved and redacted if needed v2)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/trace_static_method.phpt ([Prehook regression] Trace public static method)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_config.phpt (Startup logging config)' time='0.0422'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/close_on_exit.phpt ([Prehook Regression] Run sandbox closures for open spans on exit)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/span_with_parent_property_access.phpt (Test DDTrace\SpanData::$parent)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/keep_spans_in_limited_tracing_userland_functions.phpt ([Prehook Regression] Keep spans in limited mode (userland functions))' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/http_endpoint_resource_renaming_basic.phpt (HTTP endpoint resource renaming with DD_TRACE_RESOURCE_RENAMING_ENABLED=true)' time='0.0146'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_exception.phpt ([Prehook] Tracing closure does not have access to thrown exception)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/from_php_7_3_bug61728.phpt (Bug #61728 (PHP crash when calling ob_start in request_shutdown phase))' time='0.028'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_retval.phpt ([Prehook] Tracing closure does not have access to return value)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/svc_src_default_cleared.phpt (Default service name (DD_SERVICE or auto-resolved) leaves _dd.svc_src cleared)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/new_static.phpt ([Prehook Regression] New static instantiates from expected class)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_private_01.phpt (Verify ips in private ranges are detected as private(Base: 100.64.0.0, Mask: 255.192.0.0))' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_property_access_hook.phpt ([Prehook regression] Private and protected properties are accessed from a tracing closure)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_env.phpt (Extract client IP address (ip header set))' time='0.0145'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variadic_args_internal.phpt ([Prehook] Variadic arguments are passed to tracing closure for internal functions)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_success_03.phpt (Test \datadog\appsec\v2\track_user_login_success login parameter takes precedence over login value on user object)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variable_length_parameter_list.phpt ([Prehook regression] Trace variadic functions and methods)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/disabling_root_span_generation_at_runtime.phpt (Disabling root span removes the root span properly)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method_binds_called_object.phpt ([Prehook Regression] DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/shm_data_internal_fns.phpt (get_loaded_remote_configs, get_agent_info, get_agent_sampling_config return correct content)' time='0.6467'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.sandbox" tests="91" failures="0" errors="0" skip="3" time="2.4187">
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_001.phpt (E_ERROR fatal errors are tracked from internal function)' time='0.0257'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_success_01.phpt (Test \datadog\appsec\v2\track_user_login_success when user is string)' time='0.017'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias_overwrite.phpt (Calling DDTrace\trace_method() overwrites previous tracing functions in unresolved aliases)' time='0.0188'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_is_defined.phpt (Exceptions in the tracing closure callback are always defined)' time='0.0215'>
+<testcase name='tmp/build_extension/tests/ext/traced_attribute_delayed.phpt (Test delayed resolution of tracing attributes)' time='0.0253'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit.phpt (Run sandbox closures for open spans on exit)' time='0.0236'>
+<testcase name='tmp/build_extension/tests/ext/traced_attribute.phpt (Test tracing via attributes)' time='0.0337'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/span_clone.phpt (Clone DDTrace\SpanData)' time='0.0395'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_custom_header.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metrics.phpt (Span metrics is safely converted to numerics without errors or exceptions)' time='0.0175'>
+<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_disabled.phpt (Don&#039;t dump backtrace when segmentation fault signal is raised and config is default)' time='0.031'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_05.phpt (Gracefully handle out-of-sync spans in closure itself [user])' time='0.0223'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_05.phpt (IPv6 address in referrer header)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/errors_are_flagged_from_userland.phpt (Errors from userland will be flagged on span)' time='0.0162'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array_allowed.phpt (Values of an array are not redacted when the array base is in the DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED env var)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias.phpt (dd_trace_function() is aliased to DDTrace\trace_function())' time='0.0147'>
+<testcase name='tmp/build_extension/tests/ext/nested_exceptions.phpt (Nested exceptions are recorded (GH2498))' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/span_resource_serialization.phpt (Resource is replaced by name if null-ish)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context.phpt (Test the output of \DDTrace\current_context)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_03.phpt (Gracefully handle out-of-sync spans from traced function [user])' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/meta_struct.phpt (Add meta struct string)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_methods.phpt (Keep spans in limited mode (userland methods))' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_success_02.phpt (Test \datadog\appsec\v2\track_user_login_success when user is an array)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_from_user_error_handler_internal.phpt (Exceptions from user error handler are tracked for instrumented internal functions)' time='0.0120'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_default.phpt (Test get_memory_limit() returning correct values for default)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_userland_root_span.phpt (Userland root spans are automatically flushed when auto-flushing enabled)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/try_drop_span.phpt (Test try_drop_span())' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/non-zero_duration.phpt (Test that the sandbox API has non-zero durations)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/root_span_security_testing_headers.phpt (Security-testing headers are collected unconditionally on the root span)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_01.phpt (Gracefully handle out-of-sync spans from traced function [internal])' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/extension_no_static_tls.phpt (Extension is not compiled with STATIC_TLS)' time='0.0269'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/vm_var_types_return.phpt (VM variable types are handled properly for return)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_02.phpt (Client IP should not be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_002.phpt (E_ERROR fatal errors are tracked from hitting the memory limit)' time='0.0276'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_set.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when set)' time='0.017'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_using_function.phpt (deferred loading dispatch can be overridden)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/otel_config_remapping.phpt (Test OpenTelemetry config remapping)' time='0.0259'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush.phpt (Spans are automatically flushed when auto-flushing enabled)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/client_side_stats_config.phpt (Client-side stats: DD_TRACE_STATS_COMPUTATION_ENABLED config can be read)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/return_by_ref.phpt (Functions that return by reference are instrumented)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_002.phpt (background sender should reject msgpack array prefix that does not match expected number of traces)' time='0.0236'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_functions.phpt (Keep spans in limited mode (userland functions))' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_disabled.phpt (Startup logging is disabled)' time='0.0407'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_multiple_write.phpt (Ensure caching does not bypass the span data write handler)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/internal_hook_jit.phpt (Test internal functions are hooked within JIT)' time='0.0290'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_success_05.phpt (Test \datadog\appsec\v2\track_user_login_success id should be string to be sent)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_06.phpt (Gracefully handle out-of-sync spans in closure itself [user][default properties])' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/client_side_stats_disabled_by_default.phpt (Client-side stats: _dd.top_level metric is not set when stats disabled (default))' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_does_not_close_span_that_catches.phpt (Exceptions do not close the span that catches it)' time='0.0120'>
+<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_01.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.0144'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_disables_tracing.phpt (Auto-flushing will not instrument while flushing)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_without_query_params.phpt (Root span without query string in http.url)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exit_and_drop_span.phpt (Exit gracefully handles a dropped span)' time='0.0167'>
+<testcase name='tmp/build_extension/tests/ext/from_php_7_3_test_user_streams_consumed_bug.phpt (Testing user filter on streams)' time='0.0266'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties.phpt (Span properties defaults to values if not explicitly set (functions))' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/svc_auto_tag_otel.phpt (OTEL_SERVICE_NAME counts as user-defined (emits svc.user:true))' time='0.0155'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_sandbox_exception.phpt (Auto-flushing will sandbox an exception thrown from the tracer flush)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/svc_user_tag.phpt (Process tags include svc.user:true when DD_SERVICE is set)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/drop_spans.phpt (Span is dropped when tracing closure returns false)' time='0.0234'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_default.phpt (Test get_memory_limit() returning correct values)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_internal.phpt (DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/active_span.phpt (DDTrace\active_span basic functionality)' time='0.0245'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_explicit_reimplement.phpt ([Sandbox] Hook implementations of interface methods on all direct implementors)' time='0.0158'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_duplicate_ip_headers.phpt (Verify the right span tags are present when multiple XFF headers are provided.)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit-retval.phpt (Ensure tracing closure&#039;s $retval arg is null if invoked due to exit())' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging.phpt (Startup logging is enabled by default)' time='0.0408'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_alias.phpt (dd_trace_method() is aliased to DDTrace\trace_method())' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_log_file.phpt (Using DD_TRACE_LOG_FILE)' time='0.0235'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/get_last_error.phpt (Existing errors are kept)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_coms_empty_stacks_correctly_recycled.phpt (Coms test no memory leaks with empty data store)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_tracing_closure_and_original_call.phpt (Exceptions thrown in tracing closure and original call)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/alias_logs.phpt (Logs aliases are correctly handled)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_missing_interface.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_failure_02.phpt (Test \datadog\appsec\v2\track_user_login_failure without metadata)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_binds_called_object.phpt (DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/runtime_ini_env_version_change.phpt (Change the env and version INIs at runtime)' time='0.0158'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method.phpt (DDTrace\trace_method() can trace with internal spans)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/try_drop_span_root.phpt (Test try_drop_span() on root span)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/preinitialized_tracing_of_method.phpt ([Prehook regression] Trace public static method)' time='0.0135'>
-<skipped>: Not a supported scenario anymore</skipped>
+<testcase name='tmp/build_extension/tests/ext/svc_src_inheritance.phpt (Child spans inherit _dd.svc_src from parent at creation time)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_original_call_rethrown_in_tracing_closure.phpt (Exceptions from original call rethrown in tracing closure)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/flush-autofinish.phpt (Negative duration for dropped spans)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_multicatch.phpt (Exceptions are handled with multi-catch syntax)' time='0.0280'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr.phpt (Extract client IP address (no ip header set))' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_drops_invalid_keys.phpt (Invalid (non-string) keys in span metadata are dropped)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/extract_server_values.phpt (Test invalid $_SERVER values are properly ignored)' time='0.0351'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_closed_spans_count.phpt (dd_trace_closed_spans_count() tracks closed spans from userland and C-level)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_auto.phpt (Sidecar connection in auto mode (default))' time='0.0249'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties_method.phpt (Span properties defaults to values if not explicitly set (methods))' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_failure_01.phpt (Test \datadog\appsec\v2\track_user_login_failure)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_error_log.phpt (Exception in tracing closure gets logged)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/span_on_close.phpt (Test onClose SpanData handler)' time='0.0161'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_functions.phpt (Keep spans in limited mode (internal functions))' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/track_user_login_success_04.phpt (Test \datadog\appsec\v2\track_user_login_success id is not mandatory on user object)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_no_args.phpt (Variadic arguments are passed to tracing closure when no arguments exist in function signature)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_02.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_yield_from.phpt (Functions that return generators with &#039;yield from&#039; are instrumented)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/extension_disabled.phpt (Sanity check when extension is disabled)' time='0.0112'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/memory_limit_graceful_bailout.phpt (The tracer bails out gracefully when memory_limit INI is reached in shutdown hook)' time='0.0263'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_01.phpt (Invalid referrer hostname from HTTP headers)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_in_object.phpt (Test tracing generators within objects)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='0.2075'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_003.phpt (E_ERROR fatal errors are tracked from hitting the max execution time)' time='1.0254'>
+<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_by_default.phpt (Test \DDTrace\set_user with propagation enabled by default through configuration)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_with_finally.phpt (Return value from finally block is passed to tracing closure)' time='0.0264'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_01.phpt (Client IP should not be collected if DD_TRACE_CLIENT_IP_ENABLED/dd_trace.client_ip_enabled is not set)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/cake_02.phpt (Test that we don&#039;t leak in a set-up similar to CakePHP)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_tracer_is_limited_memory.phpt (dd_trace_tracer_is_limited() limits the tracer with a memory limit)' time='0.0286'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/new_static.phpt (New static instantiates from expected class)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/start_span_without_closing.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator.phpt (Functions that return generators are instrumented)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/span_with_removed_exception.phpt (Unset, nulled and generally invalid data in exception property is ignored)' time='0.0117'>
+<skipped>: test only works before 7.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_tracing_closure.phpt (Fatal errors are ignored inside a tracing closure (PHP 7+))' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_02.phpt (Gracefully handle out-of-sync spans from traced function [internal][default properties])' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_json.phpt (Startup logging from JSON fetched at runtime)' time='0.015'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_attach_exception.phpt (Auto-flushing will attach an exception during exception cleanup)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_honor_user_value.phpt (If peer.service is already set by the user, honor it)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_fatal.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_02.phpt (URL with special characters in host part)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_005.phpt (All open internal spans are marked with the fatal error)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_ini.phpt (Extract client IP address (ip header set))' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook.phpt ([Sandbox] Hook implementations of interface methods on direct implementor only)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/set_distributed_tracing_context_wrong_param.phpt (Wrong tags parameter passed to set_distributed_tracing_context)' time='0.0262'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_exception.phpt (Exceptions are handled from a generator context)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_error.phpt (dd_trace_serialize_msgpack() error conditions)' time='0.0152'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_methods.phpt (Keep spans in limited mode (internal methods))' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_whitelist.phpt (Root span with query params whitelist)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/manual_flush.phpt (Spans are not automatically flushed when auto-flushing disabled)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/bailout_double_hook_clear.phpt (Bailout during hook END should not cause double-clear of span (internal function))' time='0.0261'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/die_in_sandbox.phpt (Die()&#039;ing in the sandbox is properly caught)' time='0.0274'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_04.phpt (Empty referrer hostname from HTTP headers)' time='0.0157'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/cake_01.phpt (Test that we don&#039;t have a sigsegv in a set-up similar to CakePHP)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/root_span_parent_id_invalid_rhs_refcount.phpt (Invalid root span parentId assignment does not decref the RHS value)' time='0.017'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_are_passed_to_the_tracing_closure.phpt (Exceptions from original call are passed to tracing closure)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context_noenv.phpt (Test the output of \DDTrace\current_context without env variables.)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook_internal.phpt ([Sandbox] Hook implementations of internal interface methods)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/inherit_meta_from_parent.phpt (Inherit some global metadata from parent span)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_limit.phpt (Ensure the hook limit is not exceeded)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/logging_default_value.phpt (Assess that the log integration is disabled by default)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/retval_is_null_with_exception.phpt (The return value is null when an exception is thrown in the original call)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/span_create_observer.phpt (Test observing span creation)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handling.phpt (Exceptions get attached to spans)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_diagnostics.phpt (Startup logging diagnostics)' time='0.0422'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/static_tracing_closures_will_not_bind_this.phpt (Static tracing closures will not bind $this)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/ust.phpt (Unified service tagging removes version from spans)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook_inherit.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.0120'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array.phpt (Decoding nested array POST data)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_for_correct_catch_block.phpt (Exceptions are handled for the correct catch block)' time='0.0126'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.hook_method" tests="38" failures="0" errors="0" skip="0" time="0.5239">
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_01.phpt (DDTrace\hook_method prehook error is sandboxed)' time='0.0211'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_attempt_loading_once.phpt (deferred loading only happens once, even if dispatch is not overwritten)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_05.phpt (A call to trace_method from hook_method prehook has non-static closure)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_ge_php_84.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.0130'>
-<skipped>: test only stable on PHP &gt;= 8.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_01.phpt (hook_method prehook is called with the correct scope (no override))' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_004.phpt (E_USER_ERROR fatal errors are tracked from userland)' time='0.0184'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_05.phpt (DDTrace\hook_method posthook is passed the correct retval)' time='0.0244'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_multiple.phpt ([Sandbox] Hook implementations of interface methods with multiple parent abstract methods of the same name)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_02.phpt (DDTrace\hook_method prehook exception is sandboxed (debug))' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_userland.phpt (DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_01.phpt (DDTrace\hook_method posthook error is sandboxed)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_shutdown.phpt (Fatal errors are ignored in shutdown handler)' time='0.0249'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_02.phpt (DDTrace\hook_method prehook does not mess up spans with children)' time='0.0146'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_properties.phpt (Span properties are safely converted to strings without errors or exceptions)' time='0.0120'>
-<skipped>: test only works before 7.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_03.phpt (DDTrace\hook_method posthook is passed the correct args)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_and_errors_are_ignored_in_tracing_closure.phpt (Exceptions and errors are ignored when inside a tracing closure)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_03.phpt (DDTrace\hook_method prehook is passed the correct args)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_correct_catch_frame.phpt (Exceptions are handled in the correct catch frame)' time='0.0161'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_01.phpt (DDTrace\hook_method posthook is called with an exception; args are still good)' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.0258'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_02.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_args_internal.phpt (Variadic arguments are passed to tracing closure for internal functions)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_02.phpt (DDTrace\hook_method posthook exception is sandboxed)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_complex.phpt (DDTrace\trace_function() can trace with internal spans)' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_02.phpt (DDTrace\hook_method prehook is passed the correct args (variadic))' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook.phpt ([Sandbox] Hook implementations of interface methods)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_03.phpt (hook_method prehook is called with the correct scope (parent))' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_return.phpt (Functions that use return with yield are instrumented)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_01.phpt (DDTrace\hook_method posthook does not mess up span ids)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_04.phpt (Gracefully handle out-of-sync spans from traced function [user][default properties])' time='0.0169'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_access_01.phpt (hook_method prehook should have access only to public members)' time='0.0196'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.sandbox.regression" tests="42" failures="0" errors="0" skip="0" time="0.8639">
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_method_or_function_that_will_exist_later.phpt ([Sandbox regression] Methods and functions are traced before definedx)' time='0.0235'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/hook_extended_internal_class.phpt (Extended internal classes are hookable)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_accessing_outside_variables.phpt ([Sandbox regression] Tracing closure safely uses variables from outside scope)' time='0.0213'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_04.phpt (DDTrace\hook_method prehook is passed the correct args with inheritance)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/protected_method_hook.phpt ([Sandbox regression] Trace protected method)' time='0.0181'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_02.phpt (DDTrace\hook_method posthook error is sandboxed (debug))' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/very_nested_functions.phpt ([Sandbox regression] Trace deeply-nested function calls (PHP 7))' time='0.0376'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/02.phpt (DDTrace\hook_method returns false quietly when no hook is passed)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/uncaught_exception_with_finally.phpt (Finally block should only be entered once)' time='0.0211'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_02.phpt (DDTrace\hook_method posthook does not mess up spans with children)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/abstract_method_hook.phpt ([Sandbox regression] Hook implementations of abstract methods)' time='0.0176'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/01.phpt (DDTrace\hook_method supports both hooks simultaneously)' time='0.014'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_set_inside_object_methods.phpt ([Sandbox regression] Tracing closure set from inside non-static method)' time='0.0204'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_01.phpt (hook_method posthook is called with the correct scope (no override))' time='0.0164'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_configured_overrides.phpt ([Sandbox regression] Traced functions and methods are untraced with reset)' time='0.0145'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/03.phpt (DDTrace\hook_method returns false with diagnostic when no hook is passed)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/class_resolver_bailout_hook.phpt (Assert bailouts are gracefully handled within class autoloading)' time='0.0324'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_06.phpt (Nested closure targeting method call 01 (posthook))' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_static_method.phpt ([Sandbox regression] Trace public static method)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_01.phpt (DDTrace\hook_method prehook does not mess up span ids)' time='0.0153'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_property_access_hook.phpt ([Sandbox regression] Private and protected properties are accessed from a tracing closure)' time='0.0249'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_02.phpt (DDTrace\hook_method prehook error is sandboxed (debug))' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_is_limited_hard.phpt ([Sandbox regression] dd_trace_tracer_is_limited() limits the tracer with a hard span limit)' time='0.2143'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_02.phpt (DDTrace\hook_method posthook is called at exit (shutdown handler))' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trampoline_install_fake_closure_hook.phpt (Test installing hook on trampoline fake closure)' time='0.0240'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_01.phpt (DDTrace\hook_method prehook exception is sandboxed)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/throw_exception.phpt ([Sandbox regression] Traced userland function catches and rethrows exception)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_01.phpt (DDTrace\hook_method posthook is called at exit)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/nested_dropped_spans.phpt ([regression] Properly skip nested dropped spans)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_01.phpt (DDTrace\hook_method posthook)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_invoked_via_reflection.phpt ([Sandbox regression] Method invoked via reflection correctly returns created object)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_02.phpt (DDTrace\hook_method posthook is passed the correct args (variadic))' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_construct.phpt ([Sandbox regression] Trace class constructor)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_04.phpt (DDTrace\hook_method posthook is passed the correct args with inheritance)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_limiter_reset_flush.phpt ([regression] The limiter must reset after a flush)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_02.phpt (hook_method prehook is called with the correct scope (parent))' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_method_hook.phpt ([Sandbox regression] Trace method with params)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_access_01.phpt (hook_method posthook should have access only to public members)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/extension_disabled.phpt ([Sandbox regression] Tracing closures do not run when extension is disabled)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_03.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0159'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_function_hook.phpt ([Sandbox regression] Trace function with params)' time='0.0120'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_01.phpt (DDTrace\hook_method prehook)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/return_value_passed.phpt ([Sandbox regression] Return value passed to tracing closure)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_07.phpt (Nested closure targeting method call 02 (posthook))' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_self_access.phpt ([Sandbox regression] Tracing closure accesses private static method)' time='0.0123'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.regression" tests="42" failures="0" errors="0" skip="1" time="0.7934">
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/disable_tracing_disables_tracing.phpt ([Sandbox regression] Disable tracing disables all tracing from happening)' time='0.0154'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/recursion.phpt ([Sandbox regression] Recursive calls will trace only outermost invocation)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/return_value_passed.phpt ([Sandbox regression] Return value passed to tracing closure)' time='0.0169'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/used_dispatch_should_not_free.phpt ([Sandbox regression] Override traced function from within itself)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_returning_array.phpt ([Sandbox regression] Method can be traced and called from tracing closure)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_returning_array.phpt ([Sandbox regression] Method can be traced and called from tracing closure)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/handle_many_hooks.phpt (The tracer should not crash when many hooks are installed)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/variable_length_parameter_list.phpt ([Sandbox regression] Trace variadic functions and methods)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_is_limited_hard.phpt ([Sandbox regression] dd_trace_tracer_is_limited() limits the tracer with a hard span limit)' time='0.2035'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/handle_many_hooks.phpt (The tracer should not crash when many hooks are installed)' time='0.0161'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/allow_overriding_before_overrided_methods_functions_are_defined.phpt ([Sandbox regression] Trace a function and method before it is defined)' time='0.0145'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/limiter_reset_flush_with_open_spans.phpt (Starting a trace in a prehook and closing it in the posthook while an active one exists does not confuse the limiter)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_construct.phpt ([Sandbox regression] Trace class constructor)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/multiple_instrumentations.phpt ([Sandbox regression] Multiple functions and methods are traced)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/limiter_reset_flush_with_open_spans.phpt (Starting a trace in a prehook and closing it in the posthook while an active one exists does not confuse the limiter)' time='0.0193'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_method_hook.phpt ([Sandbox regression] Trace private method)' time='0.0145'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_configured_overrides.phpt ([Sandbox regression] Traced functions and methods are untraced with reset)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_method_access_hook.phpt ([Sandbox regression] Private and protected methods are called from a tracing closure)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_limiter_reset_flush.phpt ([regression] The limiter must reset after a flush)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/disable_tracing_disables_tracing.phpt ([Sandbox regression] Disable tracing disables all tracing from happening)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_method_hook.phpt ([Sandbox regression] Userland method is traced)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_method_defined_in_parent.phpt ([Sandbox regression] Trace extended method when called from parent class)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_method_or_function_that_will_exist_later.phpt ([Sandbox regression] Methods and functions are traced before definedx)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/allow_overriding_before_overrided_methods_functions_are_defined.phpt ([Sandbox regression] Trace a function and method before it is defined)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/multiple_instrumentations.phpt ([Sandbox regression] Multiple functions and methods are traced)' time='0.0176'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/namespaces.phpt ([Sandbox regression] Namespaced functions and methods are traced)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/do_not_check_if_class_or_function_exists_by_default.phpt ([Sandbox regression] Do not throw exceptions when verifying if method or function exists)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_function_tracing.phpt ([Sandbox regression] Untrace a function)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_accessing_outside_variables.phpt ([Sandbox regression] Tracing closure safely uses variables from outside scope)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/do_not_check_if_class_or_function_exists_by_default.phpt ([Sandbox regression] Do not throw exceptions when verifying if method or function exists)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/destructor_called_when_this_gets_out_of_scope.phpt ([Sandbox regression] Destructor is called when object goes out of scope)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/case_insensitive_method_hook.phpt ([Sandbox regression] Trace case-insensitive method from a child class)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_method_access_hook.phpt ([Sandbox regression] Private and protected methods are called from a tracing closure)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/destructor_called_when_this_gets_out_of_scope.phpt ([Sandbox regression] Destructor is called when object goes out of scope)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/extension_disabled.phpt ([Sandbox regression] Tracing closures do not run when extension is disabled)' time='0.0114'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_function_hook.phpt ([Sandbox regression] Userland function is traced)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/uncaught_exception_with_finally.phpt (Finally block should only be entered once)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_method_hook.phpt ([Sandbox regression] Userland method is traced)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_method_hook.phpt ([Sandbox regression] Trace method with params)' time='0.0123'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext" tests="136" failures="0" errors="0" skip="3" time="30.1509">
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_only_allowed_params.phpt (Only param whose name is in DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED shouldn&#039;t be redacted)' time='0.0263'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/class_resolver_bailout_hook.phpt (Assert bailouts are gracefully handled within class autoloading)' time='0.0232'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping.phpt (Remap http.response.status_code to http.status_code - OTel HTTP Semantic Convention &gt;= 1.21.0)' time='0.0272'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/recursion.phpt ([Sandbox regression] Recursive calls will trace only outermost invocation)' time='0.0248'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip.phpt (Verify the client ip is added from the peer IP  when no XFF header is available.)' time='0.0278'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_set_inside_object_methods.phpt ([Sandbox regression] Tracing closure set from inside non-static method)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param.phpt (Empty post request)' time='0.0195'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_property_access_hook.phpt ([Sandbox regression] Private and protected properties are accessed from a tracing closure)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_override_default.phpt (Test \DDTrace\set_user with metadata and with usr.id as a distributed tag)' time='0.0232'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_static_method.phpt ([Sandbox regression] Trace public static method)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_duplicate_ip_headers.phpt (Verify the right span tags are present when multiple XFF headers are provided.)' time='0.0239'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_method_hook.phpt ([Sandbox regression] Trace private method)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0308'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/case_insensitive_method_hook.phpt ([Sandbox regression] Trace case-insensitive method from a child class)' time='0.014'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/flush-autofinish.phpt (Negative duration for dropped spans)' time='0.0236'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_invoked_via_reflection.phpt ([Sandbox regression] Method invoked via reflection correctly returns created object)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_distributed_tracing_context_wrong_param.phpt (Wrong tags parameter passed to set_distributed_tracing_context)' time='0.0416'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/protected_method_hook.phpt ([Sandbox regression] Trace protected method)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_simple_whitelist.phpt (Post fields parameters should be retrieved and redacted if needed v2)' time='0.0327'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/throw_exception.phpt ([Sandbox regression] Traced userland function catches and rethrows exception)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0324'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/namespaces.phpt ([Sandbox regression] Namespaced functions and methods are traced)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/generate_128_bit_trace_id.phpt (Test 128 bit generation)' time='0.0237'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/abstract_method_hook.phpt ([Sandbox regression] Hook implementations of abstract methods)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_attribute.phpt (Test tracing via attributes)' time='0.0389'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_function_hook.phpt ([Sandbox regression] Userland function is traced)' time='0.0167'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array_allowed.phpt (Values of an array are not redacted when the array base is in the DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED env var)' time='0.0232'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/very_nested_functions.phpt ([Sandbox regression] Trace deeply-nested function calls (PHP 7))' time='0.034'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_tracer_is_limited_memory.phpt (dd_trace_tracer_is_limited() limits the tracer with a memory limit)' time='0.0322'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/nested_dropped_spans.phpt ([regression] Properly skip nested dropped spans)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_02.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.0191'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trampoline_install_fake_closure_hook.phpt (Test installing hook on trampoline fake closure)' time='0.0119'>
+<skipped>: The ... operator is a PHP 8.1+ feature</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_enabled.phpt (Dump backtrace when segmentation fault signal is raised and config enables it)' time='0.1072'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_function_tracing.phpt ([Sandbox regression] Untrace a function)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0154'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/used_dispatch_should_not_free.phpt ([Sandbox regression] Override traced function from within itself)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context_noenv.phpt (Test the output of \DDTrace\current_context without env variables.)' time='0.0154'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_method_defined_in_parent.phpt ([Sandbox regression] Trace extended method when called from parent class)' time='0.0115'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging.phpt (Startup logging is enabled by default)' time='0.0597'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_self_access.phpt ([Sandbox regression] Tracing closure accesses private static method)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/from_php_7_3_test_user_streams_consumed_bug.phpt (Testing user filter on streams)' time='0.0297'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/variable_length_parameter_list.phpt ([Sandbox regression] Trace variadic functions and methods)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/try_drop_span_root.phpt (Test try_drop_span() on root span)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_function_hook.phpt ([Sandbox regression] Trace function with params)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/force_flush_traces.phpt (Force flush the traces mid-way through a trace)' time='0.0263'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.priority_sampling" tests="37" failures="0" errors="0" skip="0" time="0.6434">
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/029-ksr-tag-small-rate-formatting.phpt (_dd.p.ksr uses decimal notation (not scientific) for very small sampling rates)' time='0.025'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_coms_empty_stacks_correctly_recycled.phpt (Coms test no memory leaks with empty data store)' time='0.0170'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/024-deterministic-sampling.phpt (run sampling algorithm on multiple trace IDs and ensure that the results are deterministic)' time='0.0144'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_set.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when set)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-regex-rule.phpt (Invalid regex: default sampling rate applies)' time='0.0283'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_03.phpt (Client IP should be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.0159'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/015-rule-resource-reject.phpt (priority_sampling rule with resource reject)' time='0.0396'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param_set.phpt (Empty post request without whitelisting)' time='0.0149'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/018-manual.drop.phpt (priority_sampling with manual.drop)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_disabled_default.phpt (Assesses the opt-in behavior of peer service)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/026-ksr-tag-default-sampling.phpt (_dd.p.ksr propagated tag is NOT set for default sampling (only for explicit agent rates))' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_attribute_delayed.phpt (Test delayed resolution of tracing attributes)' time='0.0248'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/010-rule-name-service-reject.phpt (priority_sampling rule with name and service reject)' time='0.0298'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_with_removed_exception.phpt (Unset, nulled and generally invalid data in exception property is ignored)' time='0.0128'>
-<skipped>: test only works before 7.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/031-ksr-tag-exact-sixth-decimal.phpt (_dd.p.ksr preserves exact 0.000001 rate without rounding away)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_low_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0502'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/008-rule-service-reject.phpt (priority_sampling rule with service reject)' time='0.0236'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/show_actual_active_span_in_hook.phpt (Test hooking preserves the active span)' time='0.0198'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/009-rule-name-service.phpt (priority_sampling rule with name and service match)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_001.phpt (background sender happy path)' time='0.0276'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/021-rule-name-as-glob-with-question-mark.phpt (priority_sampling rule with name match, using glob)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/test_special_attributes.phpt (Reserved OTel attributes that have special meaning)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/022-rule-name-as-glob-with-multiple-criterias.phpt (priority_sampling rule with name match, using glob)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_x_forwarded_for.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/019-manual.keep.phpt (priority_sampling with manual.keep)' time='0.0148'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_serialization_with_links.phpt (Serialization of a span with multiple span links)' time='0.0250'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/017-rule-tag-reject.phpt (priority_sampling rule with tag reject)' time='0.0241'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='5.3013'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/asm-standalone.phpt (priority_sampling is ignored when asm standalone is enabled)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_default.phpt (Test get_memory_limit() returning correct values for default)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/028-ksr-tag-formatting.phpt (_dd.p.ksr propagated tag formats rate with up to 6 decimal digits and no trailing zeros)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/test_special_attributes_bis.phpt (Reserved OTel attributes that have special meaning)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-json-rule.phpt (Invalid rule json: default sampling rate applies)' time='0.0249'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_disabled.phpt (Don&#039;t dump backtrace when segmentation fault signal is raised and config is default)' time='0.0829'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/gh-1828.phpt (priority_sampling regression for GH-1828)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_implicit_array_key.phpt (Post fields with a implicit array keys)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/025-ksr-tag-rule-sampling.phpt (_dd.p.ksr propagated tag is set for rule-based sampling)' time='0.0263'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_with_parent_property_access.phpt (Test DDTrace\SpanData::$parent)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/011-preset.phpt (priority_sampling preset decision retained)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/retrieve_128_bit_trace_id.phpt (Test 128-bit trace id retrieval)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/003-user-keep.phpt (priority_sampling user keep)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dropped_spans_have_negative_duration.phpt (Negative duration for dropped spans)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/005-rule-name.phpt (priority_sampling rule with name match)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_0_percent.phpt (Test get_memory_limit() returning correct values)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/001-default-sampling.phpt (priority_sampling default sampling)' time='0.0115'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request_timeout_01.phpt (A PHP request timeout does not leak/segfault (run with leak detection))' time='1.0269'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/004-rule-basic.phpt (priority_sampling basic rule)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/manual_global_override.phpt (Global explicitly set priority sampling must be respected)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_use_first_available_tag.phpt (Use the first available tag from peerServiceSources to set peer.service)' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/007-rule-service.phpt (priority_sampling rule with service match)' time='0.0245'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/base_service.phpt (Properly set _dd.base_service when service name is manually changed)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/030-ksr-tag-rounding-boundary.phpt (_dd.p.ksr rounds small rates correctly at 6-decimal boundary)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/active_span.phpt (DDTrace\active_span basic functionality)' time='0.0589'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/027-ksr-tag-not-set-manual.phpt (_dd.p.ksr propagated tag is NOT set for manual sampling)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_useragent.phpt (Verify the user agent is added to the root span on serialization.)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/006-rule-name-reject.phpt (priority_sampling rule with name reject)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_json.phpt (Startup logging from JSON fetched at runtime)' time='0.0207'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/014-rule-resource.phpt (priority_sampling rule with resource match)' time='0.0282'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ust_via_ddtags.phpt (Test that service tags in DD_TAGS are ignored but version and env tags are set)' time='0.0155'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/032-ksr-tag-below-precision-rounds-to-zero.phpt (_dd.p.ksr rounds rate below 6-decimal precision to 0)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_custom_header.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.0153'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/016-rule-tag.phpt (priority_sampling rule with tag match)' time='0.026'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_ini.phpt (Extract client IP address (ip header set))' time='0.0196'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/013-rule-service-mapped.phpt (priority_sampling service mapping)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_01.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/023-manual.keep-distributed_overwrite.phpt (manual.keep will overwrite a rejected distributed sampling decision)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array.phpt (Decoding nested array POST data)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/002-user-reject.phpt (priority_sampling user reject)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_get_link.phpt (DDTrace\SpanData::getLink basic functionality)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/012-default.phpt (priority_sampling default decision retained)' time='0.0145'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_diagnostics.phpt (Startup logging diagnostics)' time='0.0589'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/020-rule-nonroot.phpt (priority_sampling rule with match on non-root spans)' time='0.0251'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr.phpt (Extract client IP address (no ip header set))' time='0.0144'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.prehook" tests="20" failures="0" errors="0" skip="0" time="0.2796">
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variable_length_parameter_list.phpt ([Prehook regression] Trace variadic functions and methods)' time='0.0233'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_unset.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when not set)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_error_log.phpt ([Prehook Regression] Exception in tracing closure gets logged)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/meta_struct.phpt (Add meta struct string)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/drop_spans.phpt ([Prehook Regression] Span is dropped when tracing closure returns false)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_id_in_meta.phpt (dd_trace_serialize_msgpack() properly handles span_id, trace_id and parent_id, but only outside of nested arrays)' time='0.0264'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exceptions_and_errors_are_ignored_in_tracing_closure.phpt ([Prehook Regression] Exceptions and errors are ignored when inside a tracing closure)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_02.phpt (Client IP should not be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method.phpt ([Prehook Regression] DDTrace\trace_method() can trace with internal spans)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_01.phpt (Invalid referrer hostname from HTTP headers)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/trace_static_method.phpt ([Prehook regression] Trace public static method)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ust_precedence_over_ddtags.phpt (Test that individual environment variables take precedence over DD_TAGS)' time='0.0313'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method_binds_called_object.phpt ([Prehook Regression] DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0250'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exit_and_drop_span.phpt ([Prehook Regression] Exit gracefully handles a dropped span)' time='0.0159'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_windows.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='0.0210'>
-<skipped>: test only runs on Windows</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_handling.phpt ([Prehook Regression] Exceptions get attached to spans)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_honor_user_value.phpt (If peer.service is already set by the user, honor it)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variadic_args_internal.phpt ([Prehook] Variadic arguments are passed to tracing closure for internal functions)' time='0.014'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/start_span_without_closing_autofinish.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_userland.phpt ([Prehook Regression] DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_whitelist.phpt (Root span with query params whitelist)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/args_copy_before_mutation.phpt ([Prehook] Arguments are copied before mutation can occur)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/alias_logs.phpt (Logs aliases are correctly handled)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/keep_spans_in_limited_tracing_userland_functions.phpt ([Prehook Regression] Keep spans in limited mode (userland functions))' time='0.0188'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_03.phpt (URL without host part in referrer)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/close_on_exit.phpt ([Prehook Regression] Run sandbox closures for open spans on exit)' time='0.0146'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_remapping.phpt (Properly remap peer service&#039;s sources based on DD_TRACE_PEER_SERVICE_MAPPING)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_retval.phpt ([Prehook] Tracing closure does not have access to return value)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_002.phpt (background sender should reject msgpack array prefix that does not match expected number of traces)' time='0.0259'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_internal.phpt ([Prehook Regression] DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/disabling_root_span_generation_at_runtime.phpt (Disabling root span removes the root span properly)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/new_static.phpt ([Prehook Regression] New static instantiates from expected class)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/read_c_configuration.phpt (Ensure we can read C configuration data)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_method_access_hook.phpt ([Prehook regression] Private and protected methods are called from a tracing closure)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_precedence.phpt (Ensure the ip header priority is followed)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_exception.phpt ([Prehook] Tracing closure does not have access to thrown exception)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_config_remapping.phpt (Test OpenTelemetry config remapping)' time='0.0271'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_property_access_hook.phpt ([Prehook regression] Private and protected properties are accessed from a tracing closure)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inherit_meta_from_parent.phpt (Inherit some global metadata from parent span)' time='0.0131'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox" tests="90" failures="0" errors="0" skip="3" time="2.2954">
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_methods.phpt (Keep spans in limited mode (internal methods))' time='0.015'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_default.phpt (Test dd_trace_check_memory_under_limit() returning correct values for default)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_sandbox_exception.phpt (Auto-flushing will sandbox an exception thrown from the tracer flush)' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_05.phpt (IPv6 address in referrer header)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_internal.phpt (DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_04.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/static_tracing_closures_will_not_bind_this.phpt (Static tracing closures will not bind $this)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit.phpt (Run sandbox closures for open spans on exit)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation.phpt (Root span with http.url and obfuscated query string)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exit_and_drop_span.phpt (Exit gracefully handles a dropped span)' time='0.0162'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_header_to_meta.phpt (Headers values are mapped to expected tag key)' time='0.0148'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/span_clone.phpt (Clone DDTrace\SpanData)' time='0.0241'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/runtime_ini_env_version_change.phpt (Change the env and version INIs at runtime)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/die_in_sandbox.phpt (Die()&#039;ing in the sandbox is properly caught)' time='0.0242'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_env.phpt (Extract client IP address (ip header set))' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_closed_spans_count.phpt (dd_trace_closed_spans_count() tracks closed spans from userland and C-level)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_from_user_error_handler_internal.phpt (Exceptions from user error handler are tracked for instrumented internal functions)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_json_config.phpt (Startup logging config from JSON fetched at runtime)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_and_errors_are_ignored_in_tracing_closure.phpt (Exceptions and errors are ignored when inside a tracing closure)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracestate_consumption.phpt (Distributed tracestate consumption should produce valid tracestate header)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_04.phpt (Gracefully handle out-of-sync spans from traced function [user][default properties])' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/start_span_with_all_properties.phpt (Set DDTrace\start_span() properties)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/retval_is_null_with_exception.phpt (The return value is null when an exception is thrown in the original call)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/try_drop_span.phpt (Test try_drop_span())' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/vm_var_types_return.phpt (VM variable types are handled properly for return)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_without_propagation_override_default.phpt (Test \DDTrace\set_user doesn&#039;t propagate when overriding configuration)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_original_call_rethrown_in_tracing_closure.phpt (Exceptions from original call rethrown in tracing closure)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_server_values.phpt (Test invalid $_SERVER values are properly ignored)' time='0.0344'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush.phpt (Spans are automatically flushed when auto-flushing enabled)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_jit_tags.phpt ([crasht] opcache tags are attached to crash report)' time='5.2622'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/span_resource_serialization.phpt (Resource is replaced by name if null-ish)' time='0.0148'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/close_spans_until.phpt (Test DDTrace\close_spans_until)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook_internal.phpt ([Sandbox] Hook implementations of internal interface methods)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_with_metadata.phpt (Test \DDTrace\set_user with metadata)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_drops_invalid_keys.phpt (Invalid (non-string) keys in span metadata are dropped)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_without_query_params.phpt (Root span without query string in http.url)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_properties.phpt (Span properties are safely converted to strings without errors or exceptions)' time='0.012'>
+<skipped>: test only works before 7.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_http_status_code_remapping.phpt (Remap http.status_code metric to http.status_code meta - OTel HTTP Semantic Convention &lt; 1.21.0)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/preinitialized_tracing_of_method.phpt ([Prehook regression] Trace public static method)' time='0.012'>
+<skipped>: Not a supported scenario anymore</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_reference.phpt (dd_trace_serialize_msgpack() with references)' time='0.0257'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_for_correct_catch_block.phpt (Exceptions are handled for the correct catch block)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/start_span_without_closing.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_004.phpt (E_USER_ERROR fatal errors are tracked from userland)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_error.phpt (dd_trace_serialize_msgpack() error conditions)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/non-zero_duration.phpt (Test that the sandbox API has non-zero durations)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names_no_host.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED (variant using SERVER_NAME))' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/errors_are_flagged_from_userland.phpt (Errors from userland will be flagged on span)' time='0.0146'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_default.phpt (Test get_memory_limit() returning correct values)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/get_last_error.phpt (Existing errors are kept)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/from_php_7_3_bug61728.phpt (Bug #61728 (PHP crash when calling ob_start in request_shutdown phase))' time='0.0252'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_02.phpt (Gracefully handle out-of-sync spans from traced function [internal][default properties])' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_04.phpt (Empty referrer hostname from HTTP headers)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_shutdown.phpt (Fatal errors are ignored in shutdown handler)' time='0.0246'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping_precedence.phpt (http.response.status_code takes precedence over http.status_code)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_complex.phpt (DDTrace\trace_function() can trace with internal spans)' time='0.0144'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_and_backtrace_are_mutually_exclusive.phpt (Settings &#039;datadog.log_backtrace&#039; and &#039;datadog.crashtracking_enabled&#039; are mutually exclusive)' time='0.0266'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_005.phpt (All open internal spans are marked with the fatal error)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context.phpt (Test the output of \DDTrace\current_context)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_tracing_closure_and_original_call.phpt (Exceptions thrown in tracing closure and original call)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_by_default.phpt (Test \DDTrace\set_user with propagation enabled by default through configuration)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook_inherit.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_attempt_loading_once.phpt (deferred loading only happens once, even if dispatch is not overwritten)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/add_global_tag_on_userland_and_internal_spans.phpt (DDTrace\add_global_tag() on all sorts of spans)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/manual_flush.phpt (Spans are not automatically flushed when auto-flushing disabled)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ust.phpt (Foo)' time='0.0163'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_disabled.phpt (Startup logging is disabled)' time='0.0499'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_fatal.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_config.phpt (Startup logging config)' time='0.0274'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_002.phpt (E_ERROR fatal errors are tracked from hitting the memory limit)' time='0.0244'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sidecar_enabled.phpt (Sidecar should be enabled by default on PHP 8.4)' time='0.0123'>
-<skipped>: This tests is only for PHP 8.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_is_defined.phpt (Exceptions in the tracing closure callback are always defined)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_on_close.phpt (Test onClose SpanData handler)' time='0.0155'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook.phpt ([Sandbox] Hook implementations of interface methods)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation_empty.phpt (Root span with http.url and unobfuscated query string with empty regex)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_01.phpt (Gracefully handle out-of-sync spans from traced function [internal])' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_create_observer.phpt (Test observing span creation)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_limit.phpt (Ensure the hook limit is not exceeded)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_fields.phpt (Post fields parameters should be retrieved and redacted if needed)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_args_internal.phpt (Variadic arguments are passed to tracing closure for internal functions)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_05.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_no_args.phpt (Variadic arguments are passed to tracing closure when no arguments exist in function signature)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_multiple_write.phpt (Ensure caching does not bypass the span data write handler)' time='0.0171'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_multicatch.phpt (Exceptions are handled with multi-catch syntax)' time='0.0261'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extension_disabled.phpt (Sanity check when extension is disabled)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_are_passed_to_the_tracing_closure.phpt (Exceptions from original call are passed to tracing closure)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_no_metadata.phpt (Test \DDTrace\set_user with no metadata)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_yield_from.phpt (Functions that return generators with &#039;yield from&#039; are instrumented)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/do_not_check_if_class_or_function_exists_by_default.phpt (Do not throw exceptions when veryfying if class/method and function exists.)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit-retval.phpt (Ensure tracing closure&#039;s $retval arg is null if invoked due to exit())' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack.phpt (Basic functionality of dd_trace_serialize_msgpack())' time='0.0285'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/return_by_ref.phpt (Functions that return by reference are instrumented)' time='0.0152'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/nested_exceptions.phpt (Nested exceptions are recorded (GH2498))' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_correct_catch_frame.phpt (Exceptions are handled in the correct catch frame)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_disabled.phpt (Don&#039;t send crashtracker report when segmentation fault signal is raised and config disables it)' time='15.8497'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_functions.phpt (Keep spans in limited mode (internal functions))' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_01.phpt (Client IP should not be collected if DD_TRACE_CLIENT_IP_ENABLED/dd_trace.client_ip_enabled is not set)' time='0.0149'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_003.phpt (E_ERROR fatal errors are tracked from hitting the max execution time)' time='1.0244'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_02.phpt (URL with special characters in host part)' time='0.0164'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_05.phpt (Gracefully handle out-of-sync spans in closure itself [user])' time='0.017'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_log_file.phpt (Using DD_TRACE_LOG_FILE)' time='0.0246'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_with_finally.phpt (Return value from finally block is passed to tracing closure)' time='0.0267'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/logging_default_value.phpt (Assess that the log integration is disabled by default)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_06.phpt (Gracefully handle out-of-sync spans in closure itself [user][default properties])' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extension_no_static_tls.phpt (Extension is not compiled with STATIC_TLS)' time='0.0294'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/drop_spans.phpt (Span is dropped when tracing closure returns false)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_wrong_values.phpt (Using a wrongly formatted DD_TRACE_PEER_SERVICE_MAPPING doesn&#039;t break the tracer)' time='0.0230'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/new_static.phpt (New static instantiates from expected class)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sidecar_disabled_when_telemetry_disabled.phpt (Sidecar should be disabled when telemetry is disabled)' time='0.0455'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_userland.phpt (DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0123'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.sandbox.hook_method" tests="38" failures="0" errors="0" skip="0" time="0.5576">
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_02.phpt (DDTrace\hook_method posthook does not mess up spans with children)' time='0.0216'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_error_log.phpt (Exception in tracing closure gets logged)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_03.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0209'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias_overwrite.phpt (Calling DDTrace\trace_method() overwrites previous tracing functions in unresolved aliases)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_07.phpt (Nested closure targeting method call 02 (posthook))' time='0.0179'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/cake_02.phpt (Test that we don&#039;t leak in a set-up similar to CakePHP)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_access_01.phpt (hook_method prehook should have access only to public members)' time='0.0298'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_explicit_reimplement.phpt ([Sandbox] Hook implementations of interface methods on all direct implementors)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_01.phpt (DDTrace\hook_method posthook is called with an exception; args are still good)' time='0.0149'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_001.phpt (E_ERROR fatal errors are tracked from internal function)' time='0.0192'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_02.phpt (hook_method prehook is called with the correct scope (parent))' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_multiple.phpt ([Sandbox] Hook implementations of interface methods with multiple parent abstract methods of the same name)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_02.phpt (DDTrace\hook_method prehook error is sandboxed (debug))' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_using_function.phpt (deferred loading dispatch can be overridden)' time='0.0156'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/hook_extended_internal_class.phpt (Extended internal classes are hookable)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metrics.phpt (Span metrics is safely converted to numerics without errors or exceptions)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_01.phpt (DDTrace\hook_method prehook does not mess up span ids)' time='0.0160'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_missing_interface.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/01.phpt (DDTrace\hook_method supports both hooks simultaneously)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties_method.phpt (Span properties defaults to values if not explicitly set (methods))' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_03.phpt (hook_method prehook is called with the correct scope (parent))' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_userland_root_span.phpt (Userland root spans are automatically flushed when auto-flushing enabled)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_05.phpt (DDTrace\hook_method posthook is passed the correct retval)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/internal_hook_jit.phpt (Test internal functions are hooked within JIT)' time='0.0275'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_01.phpt (DDTrace\hook_method posthook does not mess up span ids)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/cake_01.phpt (Test that we don&#039;t have a sigsegv in a set-up similar to CakePHP)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/02.phpt (DDTrace\hook_method returns false quietly when no hook is passed)' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook.phpt ([Sandbox] Hook implementations of interface methods on direct implementor only)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_04.phpt (DDTrace\hook_method posthook is passed the correct args with inheritance)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_tracing_closure.phpt (Fatal errors are ignored inside a tracing closure (PHP 7+))' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_03.phpt (DDTrace\hook_method posthook is passed the correct args)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_alias.phpt (dd_trace_method() is aliased to DDTrace\trace_method())' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_02.phpt (DDTrace\hook_method prehook is passed the correct args (variadic))' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handling.phpt (Exceptions get attached to spans)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_02.phpt (DDTrace\hook_method posthook error is sandboxed (debug))' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias.phpt (dd_trace_function() is aliased to DDTrace\trace_function())' time='0.0227'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_01.phpt (hook_method posthook is called with the correct scope (no override))' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_binds_called_object.phpt (DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_01.phpt (hook_method prehook is called with the correct scope (no override))' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_methods.phpt (Keep spans in limited mode (userland methods))' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_02.phpt (DDTrace\hook_method posthook exception is sandboxed)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_return.phpt (Functions that use return with yield are instrumented)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_03.phpt (DDTrace\hook_method prehook is passed the correct args)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator.phpt (Functions that return generators are instrumented)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_02.phpt (DDTrace\hook_method prehook exception is sandboxed (debug))' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_exception.phpt (Exceptions are handled from a generator context)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_02.phpt (DDTrace\hook_method posthook is passed the correct args (variadic))' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_attach_exception.phpt (Auto-flushing will attach an exception during exception cleanup)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_02.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_in_object.phpt (Test tracing generators within objects)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_01.phpt (DDTrace\hook_method prehook exception is sandboxed)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_ge_php_84.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.013'>
+<skipped>: test only stable on PHP &gt;= 8.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_01.phpt (DDTrace\hook_method posthook)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_does_not_close_span_that_catches.phpt (Exceptions do not close the span that catches it)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_01.phpt (DDTrace\hook_method prehook)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_disables_tracing.phpt (Auto-flushing will not instrument while flushing)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_02.phpt (DDTrace\hook_method posthook is called at exit (shutdown handler))' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties.phpt (Span properties defaults to values if not explicitly set (functions))' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/03.phpt (DDTrace\hook_method returns false with diagnostic when no hook is passed)' time='0.0165'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_functions.phpt (Keep spans in limited mode (userland functions))' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_01.phpt (DDTrace\hook_method posthook is called at exit)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method.phpt (DDTrace\trace_method() can trace with internal spans)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_06.phpt (Nested closure targeting method call 01 (posthook))' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_03.phpt (Gracefully handle out-of-sync spans from traced function [user])' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_access_01.phpt (hook_method posthook should have access only to public members)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.0241'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_02.phpt (DDTrace\hook_method prehook does not mess up spans with children)' time='0.0131'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.source_code.001" tests="1" failures="0" errors="0" skip="0" time="0.0342">
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/001/git_metadata_injection_from_valid_files.phpt (Basic Git Metadata Injection from valid .git files (Repository URL &amp; Commit Sha))' time='0.0342'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_05.phpt (A call to trace_method from hook_method prehook has non-static closure)' time='0.0235'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.install_hook" tests="31" failures="0" errors="0" skip="3" time="0.5404">
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_from_callable.phpt (Tracing Fake Closures via install_hook())' time='0.0175'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_04.phpt (DDTrace\hook_method prehook is passed the correct args with inheritance)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_callable.phpt (Tracing generic callables via install_hook())' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_01.phpt (DDTrace\hook_method prehook error is sandboxed)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_retval.phpt (Overriding function return value via install_hook())' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_01.phpt (DDTrace\hook_method posthook error is sandboxed)' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_scoped_file.phpt (Test class scoped file inclusion hooking)' time='0.0126'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.autoload.php.files" tests="10" failures="0" errors="0" skip="1" time="0.1515">
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/legacy_autoloader.phpt (Execute __autoload() if present)' time='0.0175'>
-<skipped>: __autoload was removed in PHP 8</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call_jit.phpt (suppressCall() works with JIT)' time='0.0304'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions via install_hook())' time='0.0297'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_inherited_constructor.phpt (Test hooking inherited internal constructors via install_hook())' time='0.0119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_file.phpt (Test file inclusion hooking)' time='0.0143'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args.phpt (Overriding function arguments via install_hook())' time='0.0121'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call.phpt (Suppress function call via suppressCall())' time='0.0125'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_jit.phpt (generator hooking works with JIT)' time='0.0138'>
+<skipped>: JIT is only on PHP 8, and not stable enough on PHP 8.0</skipped>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure.phpt (Tracing Closures via install_hook())' time='0.0259'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/get_source_file.phpt (Retrieve the filename where the function/method originated from)' time='0.0114'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_file.phpt (Test file inclusion hooking)' time='0.012'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.0143'>
+<skipped>: test only stable on PHP &gt;= 8.4</skipped>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_default_argument.phpt (Override arguments of a function with default arguments)' time='0.0115'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_executing_hook.phpt (Ensure proper interoperability with multiple observers installed on observer removal)' time='0.028'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_not_invoked_if_tracer_disabled.phpt (Ensure hooks are not invoked after the tracer has been disabled)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/default_spl_autoloader.phpt (Execute the default spl_autoload implementation if spl_autoload_register() is called without args)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_exception.phpt (overrideException())' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/error_get_last_is_unaffected.phpt (Errors in ddtrace autoloader do not affect error_get_last())' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/internal_fake_closure_forced_parse_error_asan.phpt (ASAN repro: internal fake closure + forced eval parse error)' time='0.0258'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_registered_autoloader_match.phpt (Skip previously registered autoloader on match)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/exclude_inherited_hook.phpt (remove_hook() with class argument)' time='0.0179'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_exceptions.phpt (Request init hook ignores exceptions)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_hook_null_logger.phpt (Remove hook)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_not_found.phpt (Do not fail when PHP code couldn&#039;t be loaded)' time='0.0146'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/otel_void_post_hook_preserves_retval.phpt (OpenTelemetry hook polyfill: post hook with `: void` return type must not overwrite the function&#039;s return value)' time='0.0243'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/dd_init_open_basedir.phpt (Calling dd_init.php is confined to open_basedir settings)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/install_hook_return_by_ref.phpt (Test install_hook() on functions returning by reference)' time='0.025'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_contains_non_printable_character.phpt (Request init hook loads files without using multibyte flag)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.012'>
+<skipped>: test only stable on PHP &gt;= 8.4</skipped>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_function.phpt (Tracing Functions via install_hook())' time='0.0124'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args_internal.phpt (Adding additional function arguments on internal functions via install_hook())' time='0.012'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_argument_jit.phpt (overrideArguments() works with JIT (Issue #2174))' time='0.0261'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_generator.phpt (Replacing the return value of a generator instantiation in the begin hook)' time='0.0254'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_default_autoloader.phpt (Do not execute the default spl_autoload implementation if no autoloader is specified)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/allow_nested_hook.phpt (allowNestedHook())' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_fatal_errors.phpt (Request init hook ignores fatal errors)' time='0.0279'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator.phpt (Tracing Closures via install_hook())' time='0.0255'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.priority_sampling" tests="29" failures="0" errors="0" skip="0" time="0.5014">
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/gh-1828.phpt (priority_sampling regression for GH-1828)' time='0.0207'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.http_streams" tests="4" failures="0" errors="0" skip="0" time="0.1166">
+<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams_with_headers_array.phpt (Distributed tracing headers propagate via file_get_contents() with pre-existing headers as array.)' time='0.0301'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/008-rule-service-reject.phpt (priority_sampling rule with service reject)' time='0.0545'>
+<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams.phpt (Distributed tracing span is generated for file_get_contents())' time='0.0299'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/010-rule-name-service-reject.phpt (priority_sampling rule with name and service reject)' time='0.0267'>
+<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams_disabled.phpt (Distributed tracing span is generated for file_get_contents())' time='0.0276'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/007-rule-service.phpt (priority_sampling rule with service match)' time='0.0262'>
+<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams_with_headers_string.phpt (Distributed tracing headers propagate via file_get_contents() with pre-existing headers as string.)' time='0.029'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/014-rule-resource.phpt (priority_sampling rule with resource match)' time='0.0271'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.curl" tests="26" failures="0" errors="0" skip="0" time="0.8057">
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_002.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt_array())' time='0.037'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/009-rule-name-service.phpt (priority_sampling rule with name and service match)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_004.phpt (Verify trace source tag is sent on asm event)' time='0.0304'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/013-rule-service-mapped.phpt (priority_sampling service mapping)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_sampling_priority.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0283'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_disable.phpt (Distributed tracing headers do not propagate with curl_multi_exec() after dd_trace_disable_in_request())' time='0.0273'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/001-default-sampling.phpt (priority_sampling default sampling)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/curl_release_on_shutdown.phpt (Curl multi objects release order does not crash on shutdown)' time='0.0241'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/006-rule-name-reject.phpt (priority_sampling rule with name reject)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0268'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/020-rule-nonroot.phpt (priority_sampling rule with match on non-root spans)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_copy_handle.phpt (Distributed tracing headers propagate after curl_copy_handle())' time='0.0297'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/011-preset.phpt (priority_sampling preset decision retained)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_002.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt_array())' time='0.0272'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/018-manual.drop.phpt (priority_sampling with manual.drop)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_007.phpt (When ASM tracing is disabled and there is asm event, trace source tags is populated)' time='0.0276'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/asm-standalone.phpt (priority_sampling is ignored when asm standalone is enabled)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_001.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt())' time='0.0308'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/015-rule-resource-reject.phpt (priority_sampling rule with resource reject)' time='0.0261'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_003.phpt (Distributed tracing headers propagate existing headers on error: curl_setopt_array())' time='0.0274'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/021-rule-name-as-glob-with-question-mark.phpt (priority_sampling rule with name match, using glob)' time='0.0160'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_invalid_tags.phpt (Distributed tracing headers contain properly escaped values)' time='0.0264'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-regex-rule.phpt (Invalid regex: default sampling rate applies)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_003.phpt (Test CurlMulti during garbage collection)' time='0.0417'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/023-manual.keep-distributed_overwrite.phpt (manual.keep will overwrite a rejected distributed sampling decision)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_tracestate.phpt (Distributed tracing headers propagate with curl_exec())' time='0.026'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/019-manual.keep.phpt (priority_sampling with manual.keep)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_custom_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0292'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-json-rule.phpt (Invalid rule json: default sampling rate applies)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_005.phpt (Verify trace source tag is not sent when no asm event)' time='0.0267'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/004-rule-basic.phpt (priority_sampling basic rule)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_disabled_baggage.phpt (Baggage headers should not be propagated when curl integration is disabled)' time='0.0297'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/002-user-reject.phpt (priority_sampling user reject)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/curl_multi_exec_span_limit.phpt (curl_multi_exec parent spans honor DD_TRACE_SPANS_LIMIT (APMS-19944))' time='0.0823'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/012-default.phpt (priority_sampling default decision retained)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_001.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt())' time='0.028'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/024-deterministic-sampling.phpt (run sampling algorithm on multiple trace IDs and ensure that the results are deterministic)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_asm_event.phpt (Distributed tracing header tags propagate asm events with curl_exec())' time='0.0352'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/005-rule-name.phpt (priority_sampling rule with name match)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_002.phpt (Distributed tracing headers propagate when curl_multi_init() is called before curl_init())' time='0.0266'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/manual_global_override.phpt (Global explicitly set priority sampling must be respected)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_001.phpt (Distributed tracing headers propagate with curl_multi_exec())' time='0.0277'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/017-rule-tag-reject.phpt (priority_sampling rule with tag reject)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_006.phpt (When APM tracing is disabled, if not asm event, no tags are sent)' time='0.0303'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/016-rule-tag.phpt (priority_sampling rule with tag match)' time='0.0270'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_drop_dm.phpt (Explicitly drop dd.p.dm if provided in propagated tags when the incoming sampling priority is reject)' time='0.0256'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/003-user-keep.phpt (priority_sampling user keep)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_copy_handle.phpt (Distributed tracing headers propagate with curl_multi_exec() after curl_copy_handle())' time='0.0265'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/022-rule-name-as-glob-with-multiple-criterias.phpt (priority_sampling rule with name match, using glob)' time='0.0155'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0272'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.background.sender" tests="17" failures="6" errors="0" skip="4" time="109.3316">
-<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_survives_setuid.phpt (background sender survives setuid)' time='0.0375'>
-<skipped>: background-sender only test</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_restores_capabilities.phpt (background sender restores effective capabilities from permitted set)' time='0.0192'>
-<skipped>: background-sender only test</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id.phpt (The container ID is sent via HTTP headers to the Agent)' time='5.1060'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_unix_domain_socket.phpt (HTTP headers are sent to the Agent from the background sender over an unix domain socket)' time='5.3772'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_ignore_userland.phpt (HTTP Agent headers are ignored from userland)' time='0.0139'>
-<skipped>: background-sender only test</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.phpt (Sample rate is not changed to 0 after first call during a minute when STANDALONE ASM is enabled and there is asm events)' time='12.2865'>
-<failure type='FAILED' message=''>     First call it is used as heartbeat: 1
-002- This call has the same sample rate: 2
-003- This call also has the same sample rate: 2
-002+ 
-003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-004+ Stack trace:
-005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.php(7): RequestReplayer-&gt;waitForDataAndReplay()
-006+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.php(21): {closure}()
-007+ #2 {main}
-008+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.phpt (Sample rate is not changed to 0 after first call during a minute when there is appsec upstream)' time='12.1675'>
-<failure type='FAILED' message=''>001- First call it is used as heartbeat: 3
-002- This call has the same sample rate: 3
-003- This call also has the same sample rate: 3
-001+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-002+ Stack trace:
-003+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.php(7): RequestReplayer-&gt;waitForDataAndReplay()
-004+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.php(14): {closure}()
-005+ #2 {main}
-006+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling_sidecar.phpt (The sidecar trace flusher sender informs about changes to the agent sample rate)' time='9.3119'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling.phpt (The background sender informs about changes to the agent sample rate)' time='12.2197'>
-<failure type='FAILED' message=''>     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
-     Initial sampling: 1
-     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
-004- Generic sampling: 0
-005- [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
-006- Specific sampling: 1
-004+ 
-005+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-006+ Stack trace:
-007+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling.php(7): RequestReplayer-&gt;waitForDataAndReplay()
-008+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling.php(25): {closure}()
-009+ #2 {main}
-010+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-     [ddtrace] [info] No finished traces to be sent to the agent
-</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_handles_invalid_agent_url.phpt (The sidecar properly handles invalid agent urls)' time='0.0256'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/default_unix_domain_socket_agent.phpt (If an agent unix domain socket exists it will try to connect to it)' time='0.0135'>
-<skipped>: no permissions to create a /var/run/datadog/apm.socket</skipped>
+<testsuite name="PHP.tmp.build_extension.tests.ext.pcntl" tests="7" failures="0" errors="0" skip="0" time="1.1385">
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_reseed_span_id.phpt (Short running multiple forks)' time='0.1547'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_ipv6_support.phpt (DD_AGENT_HOST with IPv6 works)' time='0.0424'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_fallback.phpt (Send telemetry about the sidecar being disabled)' time='10.0777'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers.phpt (HTTP headers are sent to the Agent from the background sender)' time='5.1008'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_empty.phpt (An empty container ID is not sent via HTTP headers to the Agent)' time='12.3537'>
-<failure type='FAILED' message=''>     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
-     
-003- datadog-meta-lang: php
-     
-005- Done.
-004+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-005+ Stack trace:
-006+ #0 /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc(107): RequestReplayer-&gt;waitForDataAndReplay()
-007+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_empty.php(10): RequestReplayer-&gt;replayHeaders(Array)
-008+ #2 {main}
-009+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-     [ddtrace] [info] No finished traces to be sent to the agent
-</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_01.phpt (Sample rate is changed to 0 after first call during a minute when STANDALONE ASM is enabled and no asm events)' time='12.7113'>
-<failure type='FAILED' message=''>001- All good
-002- Done
-001+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-002+ Stack trace:
-003+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_01.php(13): RequestReplayer-&gt;waitForDataAndReplay()
-004+ #1 {main}
-005+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_fargate.phpt (The Fargate 1.4+ container ID is sent via HTTP headers to the Agent)' time='12.4672'>
-<failure type='FAILED' message=''>     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
-     
-003- datadog-container-id:%s34dc0b5e626f2c5c4c5170e34b10e765-1234567890
-004- datadog-meta-lang: php
-005- 
-006- Done.
-003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-004+ Stack trace:
-005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc(107): RequestReplayer-&gt;waitForDataAndReplay()
-006+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_fargate.php(9): RequestReplayer-&gt;replayHeaders()
-007+ #2 {main}
-008+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-     [ddtrace] [info] No finished traces to be sent to the agent
-</failure>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_autoflush.phpt (Long running autoflush)' time='0.0714'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.distributed_tracing" tests="24" failures="0" errors="0" skip="0" time="0.34">
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_02.phpt (Sampling priority is kept from distributed when asm upstream and asm standalone enabled)' time='0.0268'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_thread_mode_orphan.phpt (Thread mode sidecar: orphaned child process promotes itself to master after parent exits)' time='0.5298'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_04.phpt (Invalid _dd.p.ts - More bits than allowed)' time='0.0164'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_multiple.phpt (Short running multiple forks)' time='0.0972'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite.phpt (Setting custom distributed header information)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_nested.phpt (Short running nested forks)' time='0.1313'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_bogus_ids.phpt (Transmit distributed header information to spans)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_manual.phpt (Long running manual flush)' time='0.0952'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_03.phpt (Invalid _dd.p.ts - Non hexadecimal)' time='0.0120'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_single.phpt (Short running single fork)' time='0.0589'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite_active_span.phpt (Setting a distributed tracing context if a span is already active)' time='0.0258'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.autoload.php.files" tests="10" failures="0" errors="0" skip="1" time="0.1398">
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_not_found.phpt (Do not fail when PHP code couldn&#039;t be loaded)' time='0.0123'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/default_spl_autoloader.phpt (Execute the default spl_autoload implementation if spl_autoload_register() is called without args)' time='0.0119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_contains_non_printable_character.phpt (Request init hook loads files without using multibyte flag)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_generate.phpt (Test generate_distributed_tracing_headers())' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/dd_init_open_basedir.phpt (Calling dd_init.php is confined to open_basedir settings)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3.phpt (Transmit distributed header information to spans via B3 headers)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_default_autoloader.phpt (Do not execute the default spl_autoload implementation if no autoloader is specified)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers.phpt (Setting custom distributed header information)' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/error_get_last_is_unaffected.phpt (Errors in ddtrace autoloader do not affect error_get_last())' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_09.phpt (_dd.p.ts is not manipulated when no asm event)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_registered_autoloader_match.phpt (Skip previously registered autoloader on match)' time='0.0145'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/legacy_autoloader.phpt (Execute __autoload() if present)' time='0.0142'>
+<skipped>: __autoload was removed in PHP 8</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_dd_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in datadog and tracecontext headers)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_exceptions.phpt (Request init hook ignores exceptions)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span_no_sampling.phpt (Transmit distributed header information to spans via single B3 header without sampling decision)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_fatal_errors.phpt (Request init hook ignores fatal errors)' time='0.0244'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_06.phpt (Test ts is only added to traces with ASM events)' time='0.0125'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.inferred_proxy" tests="12" failures="0" errors="0" skip="0" time="0.1603">
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/alter_service.phpt (Inferred span&#039;s service shouldn&#039;t change on ini_change of datadog.service)' time='0.0144'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span.phpt (Transmit distributed header information to spans via single B3 header)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/sampling_rules.phpt (Priority sampling rules should use the inferred span&#039;s service &amp; resource)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in tracestate and traceparent headers)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/basic_test.phpt (Should create parent and child spans for a 200)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_func.phpt (Test consume_distributed_tracing_headers() with function argument)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/consume_distributed_tracing_headers.phpt (API Gateway span should be created from consuming distributed tracing headers)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_07.phpt (Test two traces get trace source from tags)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_after_span_start.phpt (Span creation with distributed context set after starting span)' time='0.0154'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_08.phpt (For now, even when trace was generated by APM the produced output on standalone is 02 on _dd.p.ts)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/security_headers_forwarded.phpt (Security-testing headers are forwarded to the inferred proxy span)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_array.phpt (Test consume_distributed_tracing_headers() with array argument)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/distributed_tracing.phpt (Span creation with distributed context)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_reset_context_on_init.phpt (Reset distributed tracing context on request init)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/incomplete_headers.phpt (An Inferred Span should not be created on missing headers)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_01.phpt (Sampling priority is changed to user keep if no asm upstream and asm standalone enabled. Also apm disabled tag is added)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/error_propagated.phpt (Should create parent and child spans for error)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_05.phpt (Invalid _dd.p.ts - It requires at least 2 bits instead of 1)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/fallback_service_name.phpt (The AWS API Gateway proxy service name should fallback to global config)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers_invalid_tags.phpt (Setting custom distributed header information with invalid propagated tags)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/multiple_traces.phpt (API Gateway span should only be created once)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit.phpt (Transmit distributed header information to spans)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_before_span_start.phpt (Span creation with distributed context set before starting span)' time='0.0131'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.wrong.parameter.errors" tests="7" failures="0" errors="0" skip="0" time="0.1033">
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_method.phpt (DDTrace_trace_method is passed wrong parameters)' time='0.0222'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.wrong.parameter.errors" tests="7" failures="0" errors="0" skip="0" time="0.087">
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_function.phpt (DDTrace_hook_function is passed wrong parameters)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/set_distributed_tracing_context.phpt (DDTrace_set_distributed_tracing_context is passed wrong parameters)' time='0.0151'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_function.phpt (DDTrace_trace_function is passed wrong parameters)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_function.phpt (DDTrace_trace_function is passed wrong parameters)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/dd_trace_send_traces_via_thread.phpt (dd_trace_send_traces_via_thread is passed wrong parameters)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_method.phpt (DDTrace_hook_method is passed wrong parameters)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_method.phpt (DDTrace_trace_method is passed wrong parameters)' time='0.014'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_id.phpt (DDTrace_trace_id is passed wrong parameters)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/set_distributed_tracing_context.phpt (DDTrace_set_distributed_tracing_context is passed wrong parameters)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/dd_trace_send_traces_via_thread.phpt (dd_trace_send_traces_via_thread is passed wrong parameters)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_method.phpt (DDTrace_hook_method is passed wrong parameters)' time='0.0115'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_function.phpt (DDTrace_hook_function is passed wrong parameters)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_id.phpt (DDTrace_trace_id is passed wrong parameters)' time='0.0124'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.integrations.curl" tests="25" failures="0" errors="0" skip="0" time="35.7852">
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/curl_release_on_shutdown.phpt (Curl multi objects release order does not crash on shutdown)' time='0.0433'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.hook_function" tests="32" failures="0" errors="0" skip="0" time="0.4462">
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/01.phpt (DDTrace\hook_function supports both hooks simultaneously)' time='0.0119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/recursion.phpt (DDTrace\hook_function supports recursion)' time='0.013'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_02.phpt (DDTrace\hook_function prehook is passed the correct args (variadic))' time='0.0119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_02.phpt (DDTrace\hook_function posthook error is sandboxed (debug))' time='0.0119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_03.phpt (DDTrace\hook_function posthook exception is sandboxed (internal))' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_002.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt_array())' time='0.0379'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_01.phpt (DDTrace\hook_function posthook is called with an exception; args are still good)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_asm_event.phpt (Distributed tracing header tags propagate asm events with curl_exec())' time='0.0398'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_01.phpt (DDTrace\hook_function posthook basic functionality)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_drop_dm.phpt (Explicitly drop dd.p.dm if provided in propagated tags when the incoming sampling priority is reject)' time='0.0189'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_03.phpt (DDTrace\hook_function prehook exception is sandboxed (internal))' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_sampling_priority.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0313'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/02.phpt (DDTrace\hook_function returns false quietly when no hook is passed)' time='0.0112'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_tracestate.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0147'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_01.phpt (DDTrace\hook_function posthook is called at exit)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_custom_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0332'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_variadic.phpt (DDTrace\hook_function posthook works with variadic functions)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_copy_handle.phpt (Distributed tracing headers propagate with curl_multi_exec() after curl_copy_handle())' time='5.0231'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_variadic.phpt (DDTrace\hook_function prehook works with variadic functions)' time='0.013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_003.phpt (Distributed tracing headers propagate existing headers on error: curl_setopt_array())' time='0.0312'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_02.phpt (DDTrace\hook_function prehook error is sandboxed (debug))' time='0.0133'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_04.phpt (DDTrace\hook_function prehook exception is sandboxed (debug internal))' time='0.0136'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_03.phpt (DDTrace\hook_function posthook is passed the correct args)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_007.phpt (When ASM tracing is disabled and there is asm event, trace source tags is populated)' time='0.0146'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_01.phpt (DDTrace\hook_function prehook error is sandboxed)' time='0.0232'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_invalid_tags.phpt (Distributed tracing headers contain properly escaped values)' time='0.0293'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_03.phpt (DDTrace\hook_function prehook is passed the correct args)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_copy_handle.phpt (Distributed tracing headers propagate after curl_copy_handle())' time='0.0312'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_02.phpt (DDTrace\hook_function posthook exception is sandboxed)' time='0.012'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_006.phpt (When APM tracing is disabled, if not asm event, no tags are sent)' time='5.1205'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_04.phpt (DDTrace\hook_function posthook exception is sandboxed (debug internal))' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_001.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt())' time='0.0318'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_002.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt_array())' time='5.0331'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_02.phpt (DDTrace\hook_function posthook is passed the correct args (variadic))' time='0.0159'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_001.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt())' time='0.0151'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_005.phpt (Verify trace source tag is not sent when no asm event)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_01.phpt (DDTrace\hook_function prehook exception is sandboxed)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0145'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_does_not_leak_error.phpt (Check that sandboxed hooks do not invoke error handlers or set the error code)' time='0.0249'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_disabled_baggage.phpt (Baggage headers should not be propagated when curl integration is disabled)' time='0.0269'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_02.phpt (DDTrace\hook_function posthook is called at exit (shutdown handler))' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0298'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_01.phpt (DDTrace\hook_function prehook basic functionality)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_004.phpt (Verify trace source tag is sent on asm event)' time='0.0276'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/dropping_trace_hook.phpt (Test dropping spans from multiple trace hooks)' time='0.0171'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_disable.phpt (Distributed tracing headers do not propagate with curl_multi_exec() after dd_trace_disable_in_request())' time='5.0455'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions)' time='0.0238'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_003.phpt (Test CurlMulti during garbage collection)' time='5.0294'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/03.phpt (DDTrace\hook_function returns false with diagnostic when no hook is passed)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_002.phpt (Distributed tracing headers propagate when curl_multi_init() is called before curl_init())' time='5.0192'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_01.phpt (DDTrace\hook_function posthook error is sandboxed)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_001.phpt (Distributed tracing headers propagate with curl_multi_exec())' time='5.0291'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_02.phpt (DDTrace\hook_function prehook exception is sandboxed (debug))' time='0.0118'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_limited_01.phpt (hook_function posthook should ignore limited mode)' time='0.0133'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.inferred_proxy" tests="11" failures="0" errors="0" skip="0" time="0.1746">
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/alter_service.phpt (Inferred span&#039;s service shouldn&#039;t change on ini_change of datadog.service)' time='0.0165'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.distributed_tracing" tests="33" failures="0" errors="0" skip="0" time="0.421">
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_func.phpt (Test consume_distributed_tracing_headers() with function argument)' time='0.0131'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_01.phpt (Sampling priority is changed to user keep if no asm upstream and asm standalone enabled. Also apm disabled tag is added)' time='0.0122'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_bogus_ids.phpt (Transmit distributed header information to spans)' time='0.0156'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_uppercase_restart.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: RESTART (uppercase) is accepted)' time='0.0122'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_ignore.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=ignore drops all incoming context including baggage)' time='0.0118'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit.phpt (Transmit distributed header information to spans)' time='0.0131'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_reset_context_on_init.phpt (Reset distributed tracing context on request init)' time='0.0123'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_restart_explicit_root.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=restart attaches span link when the root is opened via DDTrace\start_trace_span())' time='0.0117'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_09.phpt (_dd.p.ts is not manipulated when no asm event)' time='0.0125'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_08.phpt (For now, even when trace was generated by APM the produced output on standalone is 02 on _dd.p.ts)' time='0.012'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_generate.phpt (Test generate_distributed_tracing_headers())' time='0.0117'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_02.phpt (Sampling priority is kept from distributed when asm upstream and asm standalone enabled)' time='0.0123'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3.phpt (Transmit distributed header information to spans via B3 headers)' time='0.014'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_03.phpt (Invalid _dd.p.ts - Non hexadecimal)' time='0.0145'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_04.phpt (Invalid _dd.p.ts - More bits than allowed)' time='0.0132'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span_no_sampling.phpt (Transmit distributed header information to spans via single B3 header without sampling decision)' time='0.0119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_mixedcase_ignore.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: Ignore (mixed case) is accepted)' time='0.0139'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_restart.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=restart starts fresh trace with span link)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/distributed_tracing.phpt (Span creation with distributed context)' time='0.0248'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in tracestate and traceparent headers)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/basic_test.phpt (Should create parent and child spans for a 200)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_continue.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=continue inherits upstream context)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/incomplete_headers.phpt (An Inferred Span should not be created on missing headers)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers_long_origin.phpt (SpanLink::fromHeaders handles long propagated origins)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_before_span_start.phpt (Span creation with distributed context set before starting span)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers.phpt (Setting custom distributed header information)' time='0.015'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_after_span_start.phpt (Span creation with distributed context set after starting span)' time='0.0148'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_dd_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in datadog and tracecontext headers)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/error_propagated.phpt (Should create parent and child spans for error)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite.phpt (Setting custom distributed header information)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/consume_distributed_tracing_headers.phpt (API Gateway span should be created from consuming distributed tracing headers)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_array.phpt (Test consume_distributed_tracing_headers() with array argument)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/sampling_rules.phpt (Priority sampling rules should use the inferred span&#039;s service &amp; resource)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_07.phpt (Test two traces get trace source from tags)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/fallback_service_name.phpt (The AWS API Gateway proxy service name should fallback to global config)' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_invalid_fallback.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: invalid value falls back to continue)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/multiple_traces.phpt (API Gateway span should only be created once)' time='0.0226'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_06.phpt (Test ts is only added to traces with ASM events)' time='0.0122'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite_active_span.phpt (Setting a distributed tracing context if a span is already active)' time='0.0142'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_uppercase_continue.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: CONTINUE (uppercase) is accepted)' time='0.0123'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span.phpt (Transmit distributed header information to spans via single B3 header)' time='0.0119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers_invalid_tags.phpt (Setting custom distributed header information with invalid propagated tags)' time='0.0125'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_05.phpt (Invalid _dd.p.ts - It requires at least 2 bits instead of 1)' time='0.0119'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.error_status_configuration" tests="2" failures="0" errors="0" skip="0" time="0.0292">
-<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_client_configuration.phpt (HTTP client status code error configuration and helper functions)' time='0.0158'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.error_status_configuration" tests="2" failures="0" errors="0" skip="0" time="0.0246">
+<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_client_configuration.phpt (HTTP client status code error configuration and helper functions)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_parsing.phpt (HTTP server error status configuration parsing test)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_parsing.phpt (HTTP server error status configuration parsing test)' time='0.0123'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.fibers" tests="4" failures="0" errors="0" skip="0" time="0.1108">
-<testcase name='tmp/build_extension/tests/ext/fibers/fiber_observer_bailout.phpt (Test fiber observing with bailout)' time='0.0285'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.request.replayer" tests="7" failures="1" errors="0" skip="0" time="2.805">
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_exception_span_event.phpt (DDTrace\ExceptionSpanEvent serialization with overridden attributes)' time='0.3672'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/fibers/fiber_stack_switch.phpt (Test fiber observing)' time='0.0269'>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/client_side_stats.phpt (Client-side SHM span stats are computed and flushed to the agent on trace flush)' time='0.4127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/fibers/enable_tracer_in_fiber.phpt (Ensure the tracer can also be enabled or disabled in fibers)' time='0.0294'>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_agent_env.phpt (Assert that the default environment can be read from agent info)' time='0.0385'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/fibers/fiber_switch_tracer_disabled.phpt (Test executing fibers with tracer fully disabled)' time='0.0260'>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/client_side_stats_peer_tags.phpt (Client-side SHM span stats include peer tags configured via agent info)' time='1.1138'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_event.phpt (DDTrace\SpanEvent serialization with attributes)' time='0.37'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_link_with_exception.phpt (Span Link serialization with non-null EG(exception) doesn&#039;t fail)' time='0.3674'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/client_side_stats_trace_filters.phpt (Client-side stats respect trace filters (filter_tags, filter_tags_regex, ignore_resources) from agent info)' time='0.1354'>
+<failure type='FAILED' message=''>001- in traces: op.pass
+     in stats: op.pass</failure>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.dogstatsd" tests="3" failures="0" errors="0" skip="0" time="0.1813">
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_uds.phpt (Send DogStatsD metrics over an Unix Domain Socket)' time='0.0352'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.limiter" tests="3" failures="0" errors="0" skip="0" time="0.061">
+<testcase name='tmp/build_extension/tests/ext/limiter/001-limiter-disabled.phpt (rate limiter disabled)' time='0.0115'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_udp.phpt (Send DogStatsD metrics over a UDP socket)' time='0.0303'>
+<testcase name='tmp/build_extension/tests/ext/limiter/002-limiter-reached.phpt (rate limiter reached)' time='0.0245'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/disabled_if_agentless.phpt (DogStatsD is disabled in agentlessmode)' time='0.1158'>
+<testcase name='tmp/build_extension/tests/ext/limiter/003-limiter-with-asm-standalone.phpt (rate limiter always allow when DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED enabled)' time='0.025'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.single.span_sampling" tests="6" failures="0" errors="0" skip="0" time="0.4722">
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span-with-match.phpt (Test max_per_second single span limiting with multiple buckets)' time='0.0310'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.profiling" tests="2" failures="0" errors="0" skip="2" time="0.024">
+<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_01.phpt (runtime-id exists in meta when profiling is enabled)' time='0.0125'>
+<skipped>: requires profiling</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/check-sample-rate.phpt (Check sample rate is in effect)' time='0.3779'>
+<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_02.phpt (runtime-id exists in meta when profiling is disabled)' time='0.0115'>
+<skipped>: requires profiling</skipped>
+</testcase>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.remote_config" tests="6" failures="0" errors="0" skip="0" time="0.8927">
+<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_multiconfig.phpt (Test dynamic config multiconfig priority merging)' time='0.2342'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/accept-single-span.phpt (Ingest all spans)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/remote_config/rc_process_tags.phpt (Test remote config request payload)' time='0.1274'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/name-matching-single-span.phpt (Ingest all spans)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/remote_config/rc_trace_enabled_rinit.phpt (RC tracing_enabled=true during RINIT does not double-init request globals)' time='0.1439'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/read-single-span-sampling-config-from-file.phpt (Check sample rate is in effect)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_update.phpt (Test dynamic config update)' time='0.0267'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span.phpt (Test max_per_second single span limiting)' time='0.0247'>
+<testcase name='tmp/build_extension/tests/ext/remote_config/rc_fork_notify.phpt (RC notifications must appear in forked processes)' time='0.1317'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_auto_update.phpt (Test dynamic config update)' time='0.2288'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.integrations.source_code" tests="5" failures="0" errors="0" skip="0" time="0.0666">
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_remove_credentials_from_env.phpt (Remove credentials from repository URL)' time='0.0151'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.dogstatsd" tests="5" failures="0" errors="0" skip="0" time="0.1363">
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_udp_unreachable.phpt (DogStatsD client crash reproduction with unreachable UDP socket)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/repository_url_env_var.phpt (When DD_GIT_REPOSITORY_URL is specified, _dd.git.repository_url is injected)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/disabled_if_agentless.phpt (DogStatsD is disabled in agentlessmode)' time='0.0475'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/commit_sha_env_var.phpt (When DD_GIT_COMMIT_SHA is specified, _dd.git_commit_sha is injected)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_uds.phpt (Send DogStatsD metrics over an Unix Domain Socket)' time='0.0324'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_env.phpt (Basic Git Metadata Injection from env var (Repository URL &amp; Commit Sha))' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_udp.phpt (Send DogStatsD metrics over a UDP socket)' time='0.0305'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_global_tags.phpt (Basic Git Metadata Injection from global tags (Repository URL &amp; Commit Sha))' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_uds_unreachable.phpt (DogStatsD client crash reproduction with unreachable Unix socket)' time='0.0121'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.pcntl" tests="6" failures="0" errors="0" skip="0" time="0.6094">
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_autoflush.phpt (Long running autoflush)' time='0.0966'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.fibers" tests="4" failures="0" errors="0" skip="4" time="0.0518">
+<testcase name='tmp/build_extension/tests/ext/fibers/fiber_switch_tracer_disabled.phpt (Test executing fibers with tracer fully disabled)' time='0.0139'>
+<skipped>: Fibers are a PHP 8.1+ feature</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_nested.phpt (Short running nested forks)' time='0.1254'>
+<testcase name='tmp/build_extension/tests/ext/fibers/enable_tracer_in_fiber.phpt (Ensure the tracer can also be enabled or disabled in fibers)' time='0.0127'>
+<skipped>: Fibers are a PHP 8.1+ feature</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_multiple.phpt (Short running multiple forks)' time='0.1061'>
+<testcase name='tmp/build_extension/tests/ext/fibers/fiber_observer_bailout.phpt (Test fiber observing with bailout)' time='0.0124'>
+<skipped>: Fibers are a PHP 8.1+ feature</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_manual.phpt (Long running manual flush)' time='0.0960'>
+<testcase name='tmp/build_extension/tests/ext/fibers/fiber_stack_switch.phpt (Test fiber observing)' time='0.0128'>
+<skipped>: Fibers are a PHP 8.1+ feature</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_reseed_span_id.phpt (Short running multiple forks)' time='0.1226'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.source_code" tests="5" failures="0" errors="0" skip="0" time="0.0672">
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/repository_url_env_var.phpt (When DD_GIT_REPOSITORY_URL is specified, _dd.git.repository_url is injected)' time='0.0161'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_single.phpt (Short running single fork)' time='0.0627'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/commit_sha_env_var.phpt (When DD_GIT_COMMIT_SHA is specified, _dd.git_commit_sha is injected)' time='0.0124'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.limiter" tests="3" failures="0" errors="0" skip="0" time="0.0706">
-<testcase name='tmp/build_extension/tests/ext/limiter/003-limiter-with-asm-standalone.phpt (rate limiter always allow when DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED enabled)' time='0.0304'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_remove_credentials_from_env.phpt (Remove credentials from repository URL)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/limiter/002-limiter-reached.phpt (rate limiter reached)' time='0.0262'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_env.phpt (Basic Git Metadata Injection from env var (Repository URL &amp; Commit Sha))' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/limiter/001-limiter-disabled.phpt (rate limiter disabled)' time='0.0140'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_global_tags.phpt (Basic Git Metadata Injection from global tags (Repository URL &amp; Commit Sha))' time='0.0131'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.span_stack" tests="9" failures="0" errors="0" skip="0" time="0.1402">
-<testcase name='tmp/build_extension/tests/ext/span_stack/stack_dropped_parent.phpt (Span stacks are fully reset when the tracer is disabled and re-enabled)' time='0.0149'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.background.sender" tests="18" failures="0" errors="0" skip="1" time="8.3264">
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_01.phpt (Sample rate is changed to 0 after first call during a minute when STANDALONE ASM is enabled and no asm events)' time='0.1295'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_swap.phpt (Test creating swapping traces)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_ignore_userland.phpt (HTTP Agent headers are ignored from userland)' time='0.3701'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_new_trace.phpt (Test creating a new trace)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_thread_mode_permissions.phpt (Thread mode sidecar uses abstract Unix socket)' time='0.2251'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap.phpt (Test creating a switching span stacks)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_survives_setuid.phpt (background sender survives setuid)' time='0.0455'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_stack_autoclose.phpt (Test autoclosing of spans on abandoned span stacks)' time='0.0266'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_ipv6_support.phpt (DD_AGENT_HOST with IPv6 works)' time='0.0386'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/start_top_level_span_stack.phpt (Test creating a new span stack on top level)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id.phpt (The container ID is sent via HTTP headers to the Agent)' time='0.7052'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_clone.phpt (Test cloning a span stack)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_unix_domain_socket.phpt (HTTP headers are sent to the Agent from the background sender over an unix domain socket)' time='0.0704'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap_traced_function.phpt (Test swapping span stacks due to auto-close of spans by functions)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/default_unix_domain_socket_agent.phpt (If an agent unix domain socket exists it will try to connect to it)' time='0.0117'>
+<skipped>: no permissions to create a /var/run/datadog/apm.socket</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_stack.phpt (Test creating a new span stack)' time='0.0221'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_empty.phpt (An empty container ID is not sent via HTTP headers to the Agent)' time='0.3709'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.library_config" tests="6" failures="0" errors="0" skip="0" time="20.5986">
-<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_env.phpt (Check that the library config files overloads env vars)' time='0.0261'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/cli_shutdown_no_hang_unreachable_agent.phpt (CLI shutdown does not hang when agent is unreachable)' time='2.0266'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_ini.phpt (Check that the library config files overloads ini settings)' time='0.0257'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.phpt (Sample rate is not changed to 0 after first call during a minute when there is appsec upstream)' time='0.1324'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/local_config_does_not_overload_env.phpt (Check the library config files)' time='0.0264'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.phpt (Sample rate is not changed to 0 after first call during a minute when STANDALONE ASM is enabled and there is asm events)' time='0.1292'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/local_config_overloads_ini.phpt (Check the library config files)' time='0.0305'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_restores_capabilities.phpt (background sender restores effective capabilities from permitted set)' time='0.0514'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/local_config.phpt (Check the library config files)' time='10.2420'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_handles_invalid_agent_url.phpt (The sidecar properly handles invalid agent urls)' time='0.0215'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config.phpt (Check the library config files)' time='10.2479'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_fargate.phpt (The Fargate 1.4+ container ID is sent via HTTP headers to the Agent)' time='0.3648'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.distributed_tracing.baggage" tests="11" failures="0" errors="0" skip="0" time="0.1413">
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_bytes.phpt (Test baggage header interaction with bytes limits configured)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers.phpt (HTTP headers are sent to the Agent from the background sender)' time='0.6983'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_alone.phpt (Test baggage header behavior when configured by itself)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling.phpt (The background sender informs about changes to the agent sample rate)' time='1.0626'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_context_propagated.phpt (Test baggage round-trip propagation and multiple header handling)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling_sidecar.phpt (The sidecar trace flusher sender informs about changes to the agent sample rate)' time='1.8726'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_items.phpt (Test baggage header interaction with items limit configured)' time='0.0127'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.distributed_tracing.baggage" tests="11" failures="0" errors="0" skip="0" time="0.138">
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_default.phpt (Test baggage header interaction with default configurations)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_default.phpt (Test baggage header interaction with default configurations)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_alone.phpt (Test baggage header behavior when configured by itself)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_wildcard.phpt (Test baggage span tags wildcard)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_wildcard.phpt (Test baggage span tags wildcard)' time='0.015'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_first.phpt (Test baggage header interaction when is configured as first)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_keys.phpt (Test baggage span tags specifying keys)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_decoding_encoding.phpt (Test baggage header behavior with encoding and decoding)' time='0.0130'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_empty.phpt (Test baggage span tags empty config)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_empty.phpt (Test baggage span tags empty config)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_context_propagated.phpt (Test baggage round-trip propagation and multiple header handling)' time='0.0118'>
 </testcase>
 <testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags.phpt (Test baggage span tags default behavior)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_keys.phpt (Test baggage span tags specifying keys)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_decoding_encoding.phpt (Test baggage header behavior with encoding and decoding)' time='0.0117'>
 </testcase>
-</testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.profiling" tests="2" failures="0" errors="0" skip="2" time="0.0248">
-<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_01.phpt (runtime-id exists in meta when profiling is enabled)' time='0.0120'>
-<skipped>: requires profiling</skipped>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_first.phpt (Test baggage header interaction when is configured as first)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_02.phpt (runtime-id exists in meta when profiling is disabled)' time='0.0128'>
-<skipped>: requires profiling</skipped>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_bytes.phpt (Test baggage header interaction with bytes limits configured)' time='0.0123'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_items.phpt (Test baggage header interaction with items limit configured)' time='0.013'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.live.debugger" tests="8" failures="0" errors="0" skip="0" time="51.8194">
-<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_001.phpt (Test exception replay)' time='5.1901'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.call_user_func" tests="4" failures="0" errors="0" skip="0" time="0.0673">
+<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced.phpt (Test that call_user_func can trace inside a namespace)' time='0.0125'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced-array.phpt (Test that call_user_func_array can trace inside a namespace)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe.phpt (Installing a live debugger log probe)' time='17.4556'>
+<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced.phpt (Test that call_user_func can trace in global scope)' time='0.018'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe.phpt (Installing a live debugger span probe)' time='7.7928'>
+<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced-array.phpt (Test that call_user_func_array can trace in global scope)' time='0.0239'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_002.phpt (Test exception replay capture limits)' time='5.0862'>
+</testsuite>
+<testsuite name="PHP.tmp.build_extension.tests.ext.single.span_sampling" tests="6" failures="0" errors="0" skip="0" time="0.4714">
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span.phpt (Test max_per_second single span limiting)' time='0.0277'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/read-single-span-sampling-config-from-file.phpt (Check sample rate is in effect)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_decoration_probe.phpt (Installing a live debugger span decoration probe)' time='5.5634'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span-with-match.phpt (Test max_per_second single span limiting with multiple buckets)' time='0.0288'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_metric_probe.phpt (Installing a live debugger metric probe)' time='0.0322'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/check-sample-rate.phpt (Check sample rate is in effect)' time='0.3779'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe_class.phpt (Installing a live debugger span probe on a class)' time='5.5590'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/accept-single-span.phpt (Ingest all spans)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_non_regression_2989_mysqli.phpt (Non regression test for use-after-free segfault in exception replay)' time='5.1401'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/name-matching-single-span.phpt (Ingest all spans)' time='0.0128'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.telemetry" tests="12" failures="0" errors="0" skip="0" time="92.8794">
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_01.phpt (Filesystem integration depends on RASP. If RASP is not enabled, integration is disabled)' time='10.3178'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.telemetry" tests="14" failures="0" errors="0" skip="0" time="132.2185">
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration.phpt (Signal integration telemetry)' time='10.1705'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_03.phpt (Filesystem integration depends on RASP. If RASP is enabled and wrapped function are used, then it is enabled)' time='10.1644'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_04.phpt (Filesystem integration can also be disabled with default integrations flag)' time='10.073'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_logs_created.phpt (&#039;logs_created&#039; internal metric)' time='10.3218'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/disabled.phpt (Disabled telemetry test)' time='0.125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/composer.phpt (Read telemetry via composer)' time='10.2736'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/composer.phpt (Read telemetry via composer)' time='10.1775'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_04.phpt (Filesystem integration can also be disabled with default integrations flag)' time='10.3031'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/simple.phpt (Simple telemetry test)' time='10.1634'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_02.phpt (Filesystem integration depends on RASP. If RASP is enabled but wrapped functions are not used, it is not enabled)' time='10.2940'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/broken_pipe.phpt (Telemetry test with connection reset)' time='10.1759'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_runtime_error.phpt (Send logs from integration)' time='10.2513'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_01.phpt (Filesystem integration depends on RASP. If RASP is not enabled, integration is disabled)' time='10.1699'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration.phpt (Signal integration telemetry)' time='10.2731'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/config.phpt (Report user config telemetry)' time='10.1682'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_spans_created.phpt (&#039;spans_created&#039; internal metric)' time='10.2462'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/telemetry_process_tags.phpt (Test process_tags in application field)' time='10.1617'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/config.phpt (Report user config telemetry)' time='0.1138'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_02.phpt (Filesystem integration depends on RASP. If RASP is enabled but wrapped functions are not used, it is not enabled)' time='10.1591'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_03.phpt (Filesystem integration depends on RASP. If RASP is enabled and wrapped function are used, then it is enabled)' time='10.2402'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_runtime_error.phpt (Send logs from integration)' time='10.1837'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/disabled.phpt (Disabled telemetry test)' time='0.1286'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_spans_created.phpt (&#039;spans_created&#039; internal metric)' time='10.1704'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/simple.phpt (Simple telemetry test)' time='0.1159'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_logs_created.phpt (&#039;logs_created&#039; internal metric)' time='10.1558'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.call_user_func" tests="4" failures="0" errors="0" skip="0" time="0.0551">
-<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced.phpt (Test that call_user_func can trace inside a namespace)' time='0.0152'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.span_stack" tests="12" failures="0" errors="0" skip="0" time="0.1672">
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_clone_dropped_root.phpt (Cloning a span stack must not leave a dangling root_span alias when the root span is dropped (#3943))' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced-array.phpt (Test that call_user_func_array can trace inside a namespace)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/stack_dropped_parent.phpt (Span stacks are fully reset when the tracer is disabled and re-enabled)' time='0.0148'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced.phpt (Test that call_user_func can trace in global scope)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_stack.phpt (Test creating a new span stack)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced-array.phpt (Test that call_user_func_array can trace in global scope)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap.phpt (Test creating a switching span stacks)' time='0.0144'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_swap.phpt (Test creating swapping traces)' time='0.0123'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_new_trace.phpt (Test creating a new trace)' time='0.0128'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_active_unset_child.phpt (SpanStack active unset does not corrupt child span opening)' time='0.0132'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_active_reference.phpt (SpanStack active references do not corrupt child span opening)' time='0.0121'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap_traced_function.phpt (Test swapping span stacks due to auto-close of spans by functions)' time='0.0114'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_stack_autoclose.phpt (Test autoclosing of spans on abandoned span stacks)' time='0.0253'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/start_top_level_span_stack.phpt (Test creating a new span stack on top level)' time='0.0134'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_clone.phpt (Test cloning a span stack)' time='0.0125'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.request.replayer" tests="4" failures="3" errors="0" skip="0" time="37.8033">
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_exception_span_event.phpt (DDTrace\ExceptionSpanEvent serialization with overridden attributes)' time='12.1938'>
-<failure type='FAILED' message=''>     Caught exception: Exception in method
-002- string(%d) &quot;[{&quot;name&quot;:&quot;exception&quot;,&quot;time_unix_nano&quot;:%d,&quot;attributes&quot;:{&quot;exception.message&quot;:&quot;override message&quot;,&quot;exception.type&quot;:&quot;Exception&quot;,&quot;exception.stacktrace&quot;:&quot;#0 %s(%d): ExceptionClass-&gt;{%s}()\n#1 %s(%d): ExceptionClass-&gt;exceptionMethod()\n#2 {main}&quot;,&quot;custom.attribute&quot;:&quot;custom value&quot;}}]&quot;
-002+ 
-003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-004+ Stack trace:
-005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/request-replayer/dd_trace_exception_span_event.php(34): RequestReplayer-&gt;waitForDataAndReplay()
-006+ #1 {main}
-007+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_agent_env.phpt (Assert that the default environment can be read from agent info)' time='1.0278'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_event.phpt (DDTrace\SpanEvent serialization with attributes)' time='12.1463'>
-<failure type='FAILED' message=''>     In testMethod
-002- string(134) &quot;[{&quot;name&quot;:&quot;event-name&quot;,&quot;time_unix_nano&quot;:1720037568765201300,&quot;attributes&quot;:{&quot;arg1&quot;:&quot;value1&quot;,&quot;int_array&quot;:[3,4],&quot;string_array&quot;:[&quot;5&quot;,&quot;6&quot;]}}]&quot;
-002+ 
-003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-004+ Stack trace:
-005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/request-replayer/dd_trace_span_event.php(27): RequestReplayer-&gt;waitForDataAndReplay()
-006+ #1 {main}
-007+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_link_with_exception.phpt (Span Link serialization with non-null EG(exception) doesn&#039;t fail)' time='12.4354'>
-<failure type='FAILED' message=''>     Caught exception: Oops!
-002- string(%d) &quot;Uncaught Exception: Oops! in %sdd_trace_span_link_with_exception.php:17&quot;
-003- string(9) &quot;Exception&quot;
-004- string(%d) &quot;#0 %sdd_trace_span_link_with_exception.php(12): Foo-&gt;doException()
-005- #1 %sdd_trace_span_link_with_exception.php(33): Foo-&gt;bar()
-006- #2 {main}&quot;
-007- string(33) &quot;[{&quot;trace_id&quot;:&quot;42&quot;,&quot;span_id&quot;:&quot;6&quot;}]&quot;
-002+ 
-003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
-004+ Stack trace:
-005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/request-replayer/dd_trace_span_link_with_exception.php(38): RequestReplayer-&gt;waitForDataAndReplay()
-006+ #1 {main}
-007+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
-</failure>
+<testsuite name="PHP.tmp.build_extension.tests.ext.appsec" tests="7" failures="0" errors="0" skip="0" time="71.0011">
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_05.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='10.1841'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_01.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with default value)' time='10.1864'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/appsec/agentic_onboarding_is_sent_02.phpt (DD_APPSEC_AGENTIC_ONBOARDING flag is sent via telemetry with its raw value)' time='10.182'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/appsec/agentic_onboarding_is_sent_01.phpt (DD_APPSEC_AGENTIC_ONBOARDING flag is sent via telemetry with default (empty) value)' time='10.0531'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_02.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with true)' time='10.1588'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_03.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with false)' time='10.1661'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_04.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='10.0706'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.remote_config" tests="2" failures="0" errors="0" skip="0" time="10.5994">
-<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_update.phpt (Test dynamic config update)' time='5.5379'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.live.debugger" tests="12" failures="0" errors="0" skip="0" time="118.5568">
+<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_non_regression_2989_mysqli.phpt (Non regression test for use-after-free segfault in exception replay)' time='0.5461'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_metric_probe.phpt (Installing a live debugger metric probe)' time='0.0313'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_002.phpt (Test exception replay capture limits)' time='0.5525'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe_capture_timeout.phpt (Live debugger log probe capture timeout with large data structure)' time='19.3229'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_001.phpt (Test exception replay)' time='0.5401'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe.phpt (Installing a live debugger log probe)' time='19.0874'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_remove_shared_probe_id.phpt (Removing live debugger configs that share a probe id must not leave a dangling hook)' time='3.2402'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_auto_update.phpt (Test dynamic config update)' time='5.0615'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_decoration_probe.phpt (Installing a live debugger span decoration probe)' time='19.2776'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe_process_tags.phpt (Live debugger log probe includes process_tags)' time='0.5389'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe.phpt (Installing a live debugger span probe)' time='18.4126'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe_class.phpt (Installing a live debugger span probe on a class)' time='18.7428'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_enable_dynamic_config.phpt (Enabling dynamic instrumentation via dynamic configuration)' time='18.2644'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.integrations.source_code.002" tests="1" failures="0" errors="0" skip="0" time="0.0262">
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/002/git_metadata_injection_from_invalid_files.phpt (Basic Git Metadata Injection from invalid .git files (Repository URL &amp; Commit Sha))' time='0.0262'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.library_config" tests="6" failures="0" errors="0" skip="0" time="20.3285">
+<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_env.phpt (Check that the library config files overloads env vars)' time='0.0243'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/library_config/local_config.phpt (Check the library config files)' time='10.0675'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_ini.phpt (Check that the library config files overloads ini settings)' time='0.0271'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/library_config/local_config_overloads_ini.phpt (Check the library config files)' time='0.0278'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/library_config/local_config_does_not_overload_env.phpt (Check the library config files)' time='0.0246'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config.phpt (Check the library config files)' time='10.1572'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.appsec" tests="5" failures="0" errors="0" skip="0" time="41.1727">
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_01.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with default value)' time='10.2554'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.ffe" tests="6" failures="0" errors="0" skip="0" time="0.3644">
+<testcase name='tmp/build_extension/tests/ext/ffe/evaluation_metrics_native.phpt (FFE evaluation metrics use native recorder)' time='0.0114'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/ffe/system_test_data_evaluate.phpt (FFE canonical system test data evaluates through the Datadog client)' time='0.0502'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_05.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='10.2413'>
+<testcase name='tmp/build_extension/tests/ext/ffe/native_bridge_evaluate.phpt (FFE native bridge evaluates through libdatadog)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_04.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='0.1143'>
+<testcase name='tmp/build_extension/tests/ext/ffe/remote_config_lifecycle.phpt (FFE Remote Config loads and removes UFC config)' time='0.2304'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_02.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with true)' time='10.2685'>
+<testcase name='tmp/build_extension/tests/ext/ffe/serial_id_passthrough.phpt (FFE native bridge surfaces the split serial_id (Rust FfeResult -&gt; C reader -&gt; PHP) for APM span enrichment)' time='0.0152'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_03.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with false)' time='10.2932'>
+<testcase name='tmp/build_extension/tests/ext/ffe/evaluation_metrics_unix_agent_endpoint.phpt (FFE evaluation metrics flush over DD_TRACE_AGENT_URL unix domain socket)' time='0.0443'>
 </testcase>
 </testsuite>
-<testsuite name="php.tmp.build_extension.tests.ext.integrations.source_code.001" tests="1" failures="0" errors="0" skip="0" time="0.025">
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/001/git_metadata_injection_from_valid_files.phpt (Basic Git Metadata Injection from valid .git files (Repository URL &amp; Commit Sha))' time='0.0250'>
+<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.source_code.002" tests="1" failures="0" errors="0" skip="0" time="0.0258">
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/002/git_metadata_injection_from_invalid_files.phpt (Basic Git Metadata Injection from invalid .git files (Repository URL &amp; Commit Sha))' time='0.0258'>
 </testcase>
 </testsuite>
 </testsuites>
\ No newline at end of file
diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 462f3a7c2d..fb46b106e9 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -283,7 +283,8 @@ static function (SpanData $span) use ($controller, $action) {
                     if ($httpRoute !== null && $httpRoute !== '') {
                         $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
                         $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
-                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams);
+                        $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
+                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
                         if ($normalizedRoute !== null) {
                             $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                         }
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index d1e94ffa27..58d43edef4 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -65,13 +65,18 @@ public static function normalizeFromSymfony(string $path)
      * The Wildcard route type produces "/*" which is treated as a catch-all.
      * Example: "/users/:id[.:format]"
      *
-     * @param string $template     Template from httpRouteTemplateFromMatchedRoute()
-     * @param array  $matchedParams Matched params from $routeMatch->getParams()
+     * @param string      $template     Template from httpRouteTemplateFromMatchedRoute()
+     * @param array       $matchedParams Matched params from $routeMatch->getParams()
+     * @param string|null $urlPath      The raw request URL path; used to exclude optional
+     *                                  sections whose params were injected by middleware
+     *                                  rather than matched from the URL (e.g. Laminas API
+     *                                  Tools VersionListener sets :version even without a
+     *                                  /v1/ prefix).
      * @return string|null
      */
-    public static function normalizeFromLaminas(string $template, array $matchedParams = [])
+    public static function normalizeFromLaminas(string $template, array $matchedParams = [], $urlPath = null)
     {
-        $expanded = self::expandBracketOptionals($template, $matchedParams, ':');
+        $expanded = self::expandBracketOptionals($template, $matchedParams, ':', $urlPath);
         // Convert wildcard segments ('*') to a {param} placeholder before brace conversion
         $expanded = preg_replace('#/\*$#', '/{param1}', $expanded);
         $braceFormat = self::colonParamsToBraces($expanded);
@@ -387,27 +392,49 @@ function ($m) use ($matchedParams) {
     /**
      * Expand Laminas [...] optional sections based on matched params.
      * Example: "/:id[.:format]" with format present → "/:id.:format"
+     *
+     * When $urlPath is provided, an optional section is only expanded if the
+     * section text with param values substituted is a substring of $urlPath.
+     * This prevents middleware-injected params (e.g. Laminas API Tools version)
+     * from incorrectly triggering expansion of sections absent from the URL.
      */
     private static function expandBracketOptionals(
         string $template,
         array $matchedParams,
-        string $paramPrefix = ':'
+        string $paramPrefix = ':',
+        $urlPath = null
     ): string {
         $prev = null;
         while ($prev !== $template) {
             $prev = $template;
             $template = preg_replace_callback(
                 '/\[([^\[\]]*)\]/',
-                function ($m) use ($matchedParams, $paramPrefix) {
+                function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                     $inner = $m[1];
                     $pattern = '/' . preg_quote($paramPrefix, '/') . '([a-zA-Z_][a-zA-Z0-9_]*)/';
                     preg_match_all($pattern, $inner, $pm);
                     $innerParams = $pm[1];
 
                     foreach ($innerParams as $param) {
-                        if (array_key_exists($param, $matchedParams)) {
-                            return $inner;
+                        if (!array_key_exists($param, $matchedParams)) {
+                            continue;
                         }
+                        if ($urlPath !== null) {
+                            // Substitute the param value into the inner template text and
+                            // verify the result is present in the actual URL path.  This
+                            // filters out params injected by middleware (e.g. a default
+                            // :version added by Laminas API Tools) that are not in the URL.
+                            $value = (string)$matchedParams[$param];
+                            $innerWithValue = preg_replace(
+                                '/' . preg_quote($paramPrefix . $param, '/') . '/',
+                                $value,
+                                $inner
+                            );
+                            if (strpos($urlPath, $innerWithValue) === false) {
+                                continue;
+                            }
+                        }
+                        return $inner;
                     }
 
                     return '';
diff --git a/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php b/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
index b8ffe5278f..6b514a3848 100644
--- a/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
+++ b/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
@@ -23,6 +23,18 @@ public static function getTestedLibrary()
         return 'laminas-api-tools/api-tools';
     }
 
+    private static function restFieldsToIgnore(): array
+    {
+        // http.status_code and error.message vary between PHP/Laminas versions and are not
+        // under the tracer's control, so exclude them from snapshot comparison.
+        return array_merge(
+            ['metrics.php.compilation.total_time_ms', 'metrics.php.memory.peak_usage_bytes',
+             'metrics.php.memory.peak_real_usage_bytes', 'meta.error.stack', 'meta._dd.p.tid',
+             'start', 'duration'],
+            ['meta.http.status_code', 'meta.error.message']
+        );
+    }
+
     public function testScenarioRest4xx()
     {
         $this->tracesFromWebRequestSnapshot(function () {
@@ -32,7 +44,7 @@ public function testScenarioRest4xx()
                     '/datadog-rest-service/1'
                 )
             );
-        });
+        }, self::restFieldsToIgnore());
     }
 
     public function testScenarioRest2xx()
@@ -46,7 +58,7 @@ public function testScenarioRest2xx()
                     ['data' => 'dog']
                 )
             );
-        });
+        }, self::restFieldsToIgnore());
     }
 
     public function testScenarioRest5xx()
@@ -58,6 +70,6 @@ public function testScenarioRest5xx()
                     '/datadog-rest-service/42'
                 )
             );
-        });
+        }, self::restFieldsToIgnore());
     }
 }
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
index 395db3b805..58e745746b 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
@@ -13,7 +13,7 @@
       "http.method": "POST",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
       "_dd.appsec.normalized_route": "/datadog-rest-service",
-      "http.status_code": "201",
+      "http.status_code": "200",
       "http.url": "http://localhost/datadog-rest-service",
       "http.version": "1.1",
       "laminas.route.action": "DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource@create",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
index cb4e8df27b..d8e7862b4d 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
@@ -12,8 +12,8 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
-      "_dd.appsec.normalized_route": "/datadog-rest-service",
-      "http.status_code": "405",
+      "_dd.appsec.normalized_route": "/datadog-rest-service/{datadog_rest_service_id}",
+      "http.status_code": "200",
       "http.url": "http://localhost/datadog-rest-service/1",
       "http.version": "1.1",
       "laminas.route.action": "DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource@fetch",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
index b13327c7b8..401bbf64c1 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
@@ -11,13 +11,13 @@
     "meta": {
       "_dd.p.dm": "-0",
       "component": "laminas",
-      "error.message": "Uncaught Error (500): Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
+      "error.message": "Uncaught Error: Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
       "error.stack": "#0 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/AbstractResourceListener.php(182): DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource->fetch()\n#1 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\AbstractResourceListener->dispatch()\n#2 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#3 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(544): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#4 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(499): Laminas\\ApiTools\\Rest\\Resource->triggerEvent()\n#5 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(493): Laminas\\ApiTools\\Rest\\Resource->fetch()\n#6 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(372): Laminas\\ApiTools\\Rest\\RestController->get()\n#7 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(335): Laminas\\Mvc\\Controller\\AbstractRestfulController->onDispatch()\n#8 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\RestController->onDispatch()\n#9 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#10 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractController.php(105): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#11 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(306): Laminas\\Mvc\\Controller\\AbstractController->dispatch()\n#12 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/DispatchListener.php(117): Laminas\\Mvc\\Controller\\AbstractRestfulController->dispatch()\n#13 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\Mvc\\DispatchListener->onDispatch()\n#14 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#15 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Application.php(319): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#16 {path}/tests/Frameworks/Laminas/ApiTools/Latest/public/index.php(60): Laminas\\Mvc\\Application->run()\n#17 {main}",
       "error.type": "Error",
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
-      "_dd.appsec.normalized_route": "/datadog-rest-service",
-      "http.status_code": "500",
+      "_dd.appsec.normalized_route": "/datadog-rest-service/{datadog_rest_service_id}",
+      "http.status_code": "200",
       "http.url": "http://localhost/datadog-rest-service/42",
       "http.version": "1.1",
       "laminas.route.action": "DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource@fetch",
@@ -376,7 +376,7 @@
                    "error": 1,
                    "meta": {
                      "component": "laminas",
-                     "error.message": "Thrown Error (500): Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
+                     "error.message": "Thrown Error: Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
                      "error.stack": "#0 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/AbstractResourceListener.php(182): DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource->fetch()\n#1 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\AbstractResourceListener->dispatch()\n#2 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#3 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(544): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#4 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(499): Laminas\\ApiTools\\Rest\\Resource->triggerEvent()\n#5 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(493): Laminas\\ApiTools\\Rest\\Resource->fetch()\n#6 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(372): Laminas\\ApiTools\\Rest\\RestController->get()\n#7 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(335): Laminas\\Mvc\\Controller\\AbstractRestfulController->onDispatch()\n#8 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\RestController->onDispatch()\n#9 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#10 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractController.php(105): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#11 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(306): Laminas\\Mvc\\Controller\\AbstractController->dispatch()\n#12 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/DispatchListener.php(117): Laminas\\Mvc\\Controller\\AbstractRestfulController->dispatch()\n#13 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\Mvc\\DispatchListener->onDispatch()\n#14 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#15 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Application.php(319): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#16 {path}/tests/Frameworks/Laminas/ApiTools/Latest/public/index.php(60): Laminas\\Mvc\\Application->run()\n#17 {main}",
                      "error.type": "Error"
                    }
@@ -392,7 +392,7 @@
                       "error": 1,
                       "meta": {
                         "component": "laminas",
-                        "error.message": "Thrown Error (500): Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
+                        "error.message": "Thrown Error: Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
                         "error.stack": "#0 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/AbstractResourceListener.php(182): DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource->fetch()\n#1 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\AbstractResourceListener->dispatch()\n#2 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#3 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(544): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#4 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(499): Laminas\\ApiTools\\Rest\\Resource->triggerEvent()\n#5 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(493): Laminas\\ApiTools\\Rest\\Resource->fetch()\n#6 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(372): Laminas\\ApiTools\\Rest\\RestController->get()\n#7 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(335): Laminas\\Mvc\\Controller\\AbstractRestfulController->onDispatch()\n#8 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\RestController->onDispatch()\n#9 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#10 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractController.php(105): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#11 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(306): Laminas\\Mvc\\Controller\\AbstractController->dispatch()\n#12 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/DispatchListener.php(117): Laminas\\Mvc\\Controller\\AbstractRestfulController->dispatch()\n#13 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\Mvc\\DispatchListener->onDispatch()\n#14 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#15 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Application.php(319): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#16 {path}/tests/Frameworks/Laminas/ApiTools/Latest/public/index.php(60): Laminas\\Mvc\\Application->run()\n#17 {main}",
                         "error.type": "Error"
                       }

From 50bbe289cc4df90d942a2af30012f0db9af84780 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 13 Aug 2026 12:43:34 +0200
Subject: [PATCH 05/54] Tiny up the PR

---
 normal-extension-test.xml                     | 1698 ++++++++---------
 .../Integrations/Slim/SlimIntegration.php     |    1 -
 src/DDTrace/Util/RouteNormalizer.php          |  118 +-
 .../Laminas/ApiTools/Latest/RESTTest.php      |   14 +-
 .../Util/Normalizer/RouteNormalizerTest.php   |   22 -
 5 files changed, 813 insertions(+), 1040 deletions(-)

diff --git a/normal-extension-test.xml b/normal-extension-test.xml
index c412a5bb70..74a153e700 100644
--- a/normal-extension-test.xml
+++ b/normal-extension-test.xml
@@ -1,1523 +1,1397 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<testsuites name="PHP" tests="694" failures="2" errors="0" skip="18" time="374.4929">
-<testsuite name="PHP.tmp.build_extension.tests.ext" tests="173" failures="1" errors="0" skip="3" time="10.3395">
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_default.phpt (Test dd_trace_check_memory_under_limit() returning correct values for default)' time='0.0172'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/test_special_attributes_bis.phpt (Reserved OTel attributes that have special meaning)' time='0.0209'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_header_to_meta.phpt (Headers values are mapped to expected tag key)' time='0.0219'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_low_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0361'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/start_span_without_closing_autofinish.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0192'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/do_not_check_if_class_or_function_exists_by_default.phpt (Do not throw exceptions when veryfying if class/method and function exists.)' time='0.0139'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_success_07.phpt (Test \datadog\appsec\v2\track_user_login_success no user id or metadata given)' time='0.0167'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/svc_auto_tag_cli.phpt (Process tags include svc.auto:&lt;default&gt; when DD_SERVICE is unset (CLI))' time='0.0183'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0144'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/read_c_configuration.phpt (Ensure we can read C configuration data)' time='0.0141'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_03.phpt (URL without host part in referrer)' time='0.0201'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_get_link.phpt (DDTrace\SpanData::getLink basic functionality)' time='0.0147'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_jit_tags.phpt ([crasht] opcache tags are attached to crash report)' time='0.22'>
-<failure type='FAILED' message=''>001+ Segmentation fault
-     %A{
-         &quot;message&quot;: {
-005+         &quot;kind&quot;: &quot;UnixSignal&quot;,
-006+         &quot;message&quot;: &quot;Crashtracker crash ping: crash processing started - Process terminated with SI_USER (SIGSEGV)&quot;,
-007+         &quot;siginfo&quot;: {
-008+             &quot;si_addr&quot;: &quot;0x00000d6a00007e11&quot;,
-009+             &quot;si_code&quot;: 0,
-010+             &quot;si_code_human_readable&quot;: &quot;SI_USER&quot;,
-011+             &quot;si_signo&quot;: 11,
-012+             &quot;si_signo_human_readable&quot;: &quot;SIGSEGV&quot;
-013+         },
-014+         &quot;version&quot;: &quot;1.0&quot;,
-             &quot;metadata&quot;: {
-                 &quot;library_name&quot;: &quot;dd-trace-php&quot;,
-                 &quot;library_version&quot;: &quot;%s&quot;,
-                 &quot;family&quot;: &quot;php&quot;,
-                 &quot;tags&quot;: [
-                     &quot;php.opcache.enable_cli:1&quot;,
-010-                 &quot;php.opcache.jit_buffer_size:32M&quot;,
-022+                 &quot;env:none&quot;,
-023+                 &quot;service:Standard input code&quot;,
-024+                 &quot;x-datadog-test-session-token:tests\/ext\/crashtracker_segfault.phpt&quot;,
-025+                 &quot;is_crash:true&quot;,
-026+                 &quot;severity:crash&quot;,
-027+                 &quot;library_version:1.23.0&quot;,
-028+                 &quot;language:php&quot;,
-029+                 &quot;runtime:php&quot;,
-030+                 &quot;runtime-id:9c77dab0-d858-49e6-b7ce-c2fb7762654a&quot;,
-031+                 &quot;runtime_version:8.0.30&quot;,
-032+                 &quot;process_tags:entrypoint.name:standard_input_code,entrypoint.type:script,entrypoint.workdir:app,runtime.sapi:cli&quot;
-033+             ]
-034+         }
-035+     },
-036+     &quot;level&quot;: &quot;DEBUG&quot;,
-037+     &quot;count&quot;: 1,
-038+     &quot;stack_trace&quot;: null,
-039+     &quot;tags&quot;: &quot;uuid:81bcd709-f64d-4004-a298-c9f98c044622,is_crash_ping:true,service:Standard input code,language_name:php,language_version:8.0.30,tracer_version:1.23.0,si_code_human_readable:SI_USER,si_signo:11,si_signo_human_readable:SIGSEGV,runtime_platform:aarch64-unknown-linux-gnu,env:none&quot;,
-040+     &quot;is_sensitive&quot;: false,
-012-                 &quot;php.opcache.jit:tracing&quot;,
-     %A
-     }%A</failure>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_precedence.phpt (Ensure the ip header priority is followed)' time='0.0159'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0122'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0123'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/show_actual_active_span_in_hook.phpt (Test hooking preserves the active span)' time='0.0117'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_windows.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='0.0123'>
-<skipped>: test only runs on Windows</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_failure_03.phpt (Test \datadog\appsec\v2\track_user_login_failure invalid login)' time='0.0124'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_05.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0148'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_with_metadata.phpt (Test \DDTrace\set_user with metadata)' time='0.0139'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/secure_random_generates_nonzero_ids.phpt (DD_TRACE_SECURE_RANDOM generates valid non-zero span IDs)' time='0.0133'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation.phpt (Root span with http.url and obfuscated query string)' time='0.013'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/ust_precedence_over_ddtags.phpt (Test that individual environment variables take precedence over DD_TAGS)' time='0.0121'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_collect_all_threads.phpt (Crashtracker collects all threads when collect_all_threads is enabled)' time='0.3024'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_override_default.phpt (Test \DDTrace\set_user with metadata and with usr.id as a distributed tag)' time='0.0134'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_and_backtrace_are_mutually_exclusive.phpt (Settings &#039;datadog.log_backtrace&#039; and &#039;datadog.crashtracking_enabled&#039; are mutually exclusive)' time='0.0243'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/force_flush_traces.phpt (Force flush the traces mid-way through a trace)' time='0.0235'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/start_span_with_all_properties.phpt (Set DDTrace\start_span() properties)' time='0.0139'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_x_forwarded_for.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.0121'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_only_allowed_params.phpt (Only param whose name is in DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED shouldn&#039;t be redacted)' time='0.0127'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_reference.phpt (dd_trace_serialize_msgpack() with references)' time='0.0248'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_useragent.phpt (Verify the user agent is added to the root span on serialization.)' time='0.0174'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip.phpt (Verify the client ip is added from the peer IP  when no XFF header is available.)' time='0.0152'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/add_global_tag_on_userland_and_internal_spans.phpt (DDTrace\add_global_tag() on all sorts of spans)' time='0.0131'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_without_propagation_override_default.phpt (Test \DDTrace\set_user doesn&#039;t propagate when overriding configuration)' time='0.0124'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/http_endpoint_resource_renaming_always_simplified.phpt (HTTP endpoint resource renaming with DD_TRACE_RESOURCE_RENAMING_ALWAYS_SIMPLIFIED_ENDPOINT=true)' time='0.0124'>
+<testsuites name="php" tests="605" failures="9" errors="0" skip="15" time="438.5129">
+<testsuite name="php.tmp.build_extension.tests.ext.sandbox.install_hook" tests="29" failures="0" errors="0" skip="2" time="0.5153">
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_retval.phpt (Overriding function return value via install_hook())' time='0.0201'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_use_first_available_tag.phpt (Use the first available tag from peerServiceSources to set peer.service)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_function.phpt (Tracing Functions via install_hook())' time='0.0209'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_invalid.phpt (Invalid sidecar connection mode falls back to auto)' time='0.0384'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_file.phpt (Test file inclusion hooking)' time='0.0168'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_remapping.phpt (Properly remap peer service&#039;s sources based on DD_TRACE_PEER_SERVICE_MAPPING)' time='0.0156'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator.phpt (Tracing Closures via install_hook())' time='0.0276'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/svc_runtime_change.phpt (Changing datadog.service at runtime recomputes svc.user/svc.auto process tags per-span)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args_internal.phpt (Adding additional function arguments on internal functions via install_hook())' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_config.phpt (DD_TRACE_SIDECAR_CONNECTION_MODE configuration parsing)' time='0.0237'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/retrieve_128_bit_trace_id.phpt (Test 128-bit trace id retrieval)' time='0.0127'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_04.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0123'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracestate_consumption.phpt (Distributed tracestate consumption should produce valid tracestate header)' time='0.0112'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.0136'>
+<skipped>: test only stable on PHP &gt;= 8.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping_precedence.phpt (http.response.status_code takes precedence over http.status_code)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_exception.phpt (overrideException())' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_propagators_empty_dd_propagation_style.phpt (OTEL_PROPAGATORS fallback uses correct buffer when DD_TRACE_PROPAGATION_STYLE fails to decode)' time='0.0278'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure.phpt (Tracing Closures via install_hook())' time='0.0271'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/allow_nested_hook.phpt (allowNestedHook())' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_disabled.phpt (Don&#039;t send crashtracker report when segmentation fault signal is raised and config disables it)' time='5.1555'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args.phpt (Overriding function arguments via install_hook())' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/test_special_attributes.phpt (Reserved OTel attributes that have special meaning)' time='0.0151'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_jit.phpt (generator hooking works with JIT)' time='0.0288'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_implicit_array_key.phpt (Post fields with a implicit array keys)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_hook_null_logger.phpt (Remove hook)' time='0.0167'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_subprocess.phpt (Sidecar connection in subprocess mode)' time='0.0331'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_generator.phpt (Replacing the return value of a generator instantiation in the begin hook)' time='0.0250'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_success_06.phpt (Test \datadog\appsec\v2\track_user_login_success no user id given)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_argument_jit.phpt (overrideArguments() works with JIT (Issue #2174))' time='0.0290'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/generate_128_bit_trace_id.phpt (Test 128 bit generation)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_scoped_file.phpt (Test class scoped file inclusion hooking)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_0_percent.phpt (Test get_memory_limit() returning correct values)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_executing_hook.phpt (Ensure proper interoperability with multiple observers installed on observer removal)' time='0.0247'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/close_spans_until.phpt (Test DDTrace\close_spans_until)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_inherited_constructor.phpt (Test hooking inherited internal constructors via install_hook())' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_03.phpt (Client IP should be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/get_source_file.phpt (Retrieve the filename where the function/method originated from)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/svc_src_manual_override.phpt (Manual override of span service produces _dd.svc_src = &#039;m&#039;)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/install_hook_return_by_ref.phpt (Test install_hook() on functions returning by reference)' time='0.0254'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_json_config.phpt (Startup logging config from JSON fetched at runtime)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_not_invoked_if_tracer_disabled.phpt (Ensure hooks are not invoked after the tracer has been disabled)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0176'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_default_argument.phpt (Override arguments of a function with default arguments)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_security_testing_headers_absent.phpt (Security-testing header tags are absent when headers are not sent)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions via install_hook())' time='0.0266'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_enabled.phpt (Dump backtrace when segmentation fault signal is raised and config enables it)' time='0.0371'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call_jit.phpt (suppressCall() works with JIT)' time='0.0155'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/secure_random_ignores_prng_seed.phpt (DD_TRACE_SECURE_RANDOM bypasses the deterministic PRNG seed)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.0143'>
+<skipped>: test only stable on PHP &gt;= 8.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_serialization_with_links.phpt (Serialization of a span with multiple span links)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_file.phpt (Test file inclusion hooking)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/client_side_stats_top_level.phpt (Client-side stats: _dd.top_level metric is set on top-level spans)' time='0.0151'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/exclude_inherited_hook.phpt (remove_hook() with class argument)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param_set.phpt (Empty post request without whitelisting)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_from_callable.phpt (Tracing Fake Closures via install_hook())' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_http_status_code_remapping.phpt (Remap http.status_code metric to http.status_code meta - OTel HTTP Semantic Convention &lt; 1.21.0)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call.phpt (Suppress function call via suppressCall())' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_001.phpt (background sender happy path)' time='0.0254'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_callable.phpt (Tracing generic callables via install_hook())' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping.phpt (Remap http.response.status_code to http.status_code - OTel HTTP Semantic Convention &gt;= 1.21.0)' time='0.0123'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.sandbox.hook_function" tests="32" failures="0" errors="0" skip="0" time="0.5227">
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_01.phpt (DDTrace\hook_function posthook is called with an exception; args are still good)' time='0.0196'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_02.phpt (DDTrace\hook_function prehook is passed the correct args (variadic))' time='0.0175'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_disabled_default.phpt (Assesses the opt-in behavior of peer service)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_02.phpt (DDTrace\hook_function posthook exception is sandboxed)' time='0.0263'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation_empty.phpt (Root span with http.url and unobfuscated query string with empty regex)' time='0.0162'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_01.phpt (DDTrace\hook_function posthook basic functionality)' time='0.0321'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names_no_host.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED (variant using SERVER_NAME))' time='0.0146'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_variadic.phpt (DDTrace\hook_function posthook works with variadic functions)' time='0.0261'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param.phpt (Empty post request)' time='0.0158'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/dropping_trace_hook.phpt (Test dropping spans from multiple trace hooks)' time='0.0190'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_fields.phpt (Post fields parameters should be retrieved and redacted if needed)' time='0.015'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_04.phpt (DDTrace\hook_function posthook exception is sandboxed (debug internal))' time='0.0177'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dropped_spans_have_negative_duration.phpt (Negative duration for dropped spans)' time='0.0156'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_01.phpt (DDTrace\hook_function posthook error is sandboxed)' time='0.0195'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_id_in_meta.phpt (dd_trace_serialize_msgpack() properly handles span_id, trace_id and parent_id, but only outside of nested arrays)' time='0.0273'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/02.phpt (DDTrace\hook_function returns false quietly when no hook is passed)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_wrong_values.phpt (Using a wrongly formatted DD_TRACE_PEER_SERVICE_MAPPING doesn&#039;t break the tracer)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_04.phpt (DDTrace\hook_function prehook exception is sandboxed (debug internal))' time='0.0161'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_no_metadata.phpt (Test \DDTrace\set_user with no metadata)' time='0.0163'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_03.phpt (DDTrace\hook_function posthook is passed the correct args)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request_timeout_01.phpt (A PHP request timeout does not leak/segfault (run with leak detection))' time='1.0348'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_limited_01.phpt (hook_function posthook should ignore limited mode)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/process_tags.phpt (Process tags are added to root span when enabled)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_03.phpt (DDTrace\hook_function prehook is passed the correct args)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack.phpt (Basic functionality of dd_trace_serialize_msgpack())' time='0.026'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_02.phpt (DDTrace\hook_function prehook error is sandboxed (debug))' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_unset.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when not set)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_03.phpt (DDTrace\hook_function posthook exception is sandboxed (internal))' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/base_service.phpt (Properly set _dd.base_service when service name is manually changed)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_02.phpt (DDTrace\hook_function posthook is called at exit (shutdown handler))' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sidecar_enabled.phpt (Sidecar should be enabled by default on PHP 8.4)' time='0.0141'>
-<skipped>: This tests is only for PHP 8.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_01.phpt (DDTrace\hook_function prehook error is sandboxed)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ust_via_ddtags.phpt (Test that service tags in DD_TAGS are ignored but version and env tags are set)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0144'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/process_tag_value_normalization.phpt (Process tag value normalization)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0144'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_simple_whitelist.phpt (Post fields parameters should be retrieved and redacted if needed v2)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions)' time='0.0266'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_config.phpt (Startup logging config)' time='0.0422'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_does_not_leak_error.phpt (Check that sandboxed hooks do not invoke error handlers or set the error code)' time='0.0277'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_with_parent_property_access.phpt (Test DDTrace\SpanData::$parent)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_variadic.phpt (DDTrace\hook_function prehook works with variadic functions)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/http_endpoint_resource_renaming_basic.phpt (HTTP endpoint resource renaming with DD_TRACE_RESOURCE_RENAMING_ENABLED=true)' time='0.0146'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_02.phpt (DDTrace\hook_function posthook error is sandboxed (debug))' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/from_php_7_3_bug61728.phpt (Bug #61728 (PHP crash when calling ob_start in request_shutdown phase))' time='0.028'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_01.phpt (DDTrace\hook_function prehook exception is sandboxed)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/svc_src_default_cleared.phpt (Default service name (DD_SERVICE or auto-resolved) leaves _dd.svc_src cleared)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/recursion.phpt (DDTrace\hook_function supports recursion)' time='0.0147'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_private_01.phpt (Verify ips in private ranges are detected as private(Base: 100.64.0.0, Mask: 255.192.0.0))' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/03.phpt (DDTrace\hook_function returns false with diagnostic when no hook is passed)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_env.phpt (Extract client IP address (ip header set))' time='0.0145'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_02.phpt (DDTrace\hook_function posthook is passed the correct args (variadic))' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_success_03.phpt (Test \datadog\appsec\v2\track_user_login_success login parameter takes precedence over login value on user object)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_01.phpt (DDTrace\hook_function prehook basic functionality)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/disabling_root_span_generation_at_runtime.phpt (Disabling root span removes the root span properly)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_02.phpt (DDTrace\hook_function prehook exception is sandboxed (debug))' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/shm_data_internal_fns.phpt (get_loaded_remote_configs, get_agent_info, get_agent_sampling_config return correct content)' time='0.6467'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_01.phpt (DDTrace\hook_function posthook is called at exit)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_success_01.phpt (Test \datadog\appsec\v2\track_user_login_success when user is string)' time='0.017'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/01.phpt (DDTrace\hook_function supports both hooks simultaneously)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_03.phpt (DDTrace\hook_function prehook exception is sandboxed (internal))' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_attribute_delayed.phpt (Test delayed resolution of tracing attributes)' time='0.0253'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.sandbox.prehook" tests="20" failures="0" errors="0" skip="0" time="0.2707">
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_error_log.phpt ([Prehook Regression] Exception in tracing closure gets logged)' time='0.0164'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_attribute.phpt (Test tracing via attributes)' time='0.0337'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/args_copy_before_mutation.phpt ([Prehook] Arguments are copied before mutation can occur)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_custom_header.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_internal.phpt ([Prehook Regression] DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_disabled.phpt (Don&#039;t dump backtrace when segmentation fault signal is raised and config is default)' time='0.031'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method.phpt ([Prehook Regression] DDTrace\trace_method() can trace with internal spans)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_05.phpt (IPv6 address in referrer header)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_handling.phpt ([Prehook Regression] Exceptions get attached to spans)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array_allowed.phpt (Values of an array are not redacted when the array base is in the DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED env var)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_userland.phpt ([Prehook Regression] DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/nested_exceptions.phpt (Nested exceptions are recorded (GH2498))' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/drop_spans.phpt ([Prehook Regression] Span is dropped when tracing closure returns false)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context.phpt (Test the output of \DDTrace\current_context)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_method_access_hook.phpt ([Prehook regression] Private and protected methods are called from a tracing closure)' time='0.0190'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/meta_struct.phpt (Add meta struct string)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exit_and_drop_span.phpt ([Prehook Regression] Exit gracefully handles a dropped span)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_success_02.phpt (Test \datadog\appsec\v2\track_user_login_success when user is an array)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exceptions_and_errors_are_ignored_in_tracing_closure.phpt ([Prehook Regression] Exceptions and errors are ignored when inside a tracing closure)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_default.phpt (Test get_memory_limit() returning correct values for default)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/trace_static_method.phpt ([Prehook regression] Trace public static method)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/try_drop_span.phpt (Test try_drop_span())' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/close_on_exit.phpt ([Prehook Regression] Run sandbox closures for open spans on exit)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_security_testing_headers.phpt (Security-testing headers are collected unconditionally on the root span)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/keep_spans_in_limited_tracing_userland_functions.phpt ([Prehook Regression] Keep spans in limited mode (userland functions))' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extension_no_static_tls.phpt (Extension is not compiled with STATIC_TLS)' time='0.0269'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_exception.phpt ([Prehook] Tracing closure does not have access to thrown exception)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_02.phpt (Client IP should not be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_retval.phpt ([Prehook] Tracing closure does not have access to return value)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_set.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when set)' time='0.017'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/new_static.phpt ([Prehook Regression] New static instantiates from expected class)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/otel_config_remapping.phpt (Test OpenTelemetry config remapping)' time='0.0259'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_property_access_hook.phpt ([Prehook regression] Private and protected properties are accessed from a tracing closure)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/client_side_stats_config.phpt (Client-side stats: DD_TRACE_STATS_COMPUTATION_ENABLED config can be read)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variadic_args_internal.phpt ([Prehook] Variadic arguments are passed to tracing closure for internal functions)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_002.phpt (background sender should reject msgpack array prefix that does not match expected number of traces)' time='0.0236'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variable_length_parameter_list.phpt ([Prehook regression] Trace variadic functions and methods)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_disabled.phpt (Startup logging is disabled)' time='0.0407'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method_binds_called_object.phpt ([Prehook Regression] DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_multiple_write.phpt (Ensure caching does not bypass the span data write handler)' time='0.0118'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.sandbox" tests="91" failures="0" errors="0" skip="3" time="2.4187">
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_001.phpt (E_ERROR fatal errors are tracked from internal function)' time='0.0257'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_success_05.phpt (Test \datadog\appsec\v2\track_user_login_success id should be string to be sent)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias_overwrite.phpt (Calling DDTrace\trace_method() overwrites previous tracing functions in unresolved aliases)' time='0.0188'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/client_side_stats_disabled_by_default.phpt (Client-side stats: _dd.top_level metric is not set when stats disabled (default))' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_is_defined.phpt (Exceptions in the tracing closure callback are always defined)' time='0.0215'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_01.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.0144'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit.phpt (Run sandbox closures for open spans on exit)' time='0.0236'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_without_query_params.phpt (Root span without query string in http.url)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/span_clone.phpt (Clone DDTrace\SpanData)' time='0.0395'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/from_php_7_3_test_user_streams_consumed_bug.phpt (Testing user filter on streams)' time='0.0266'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metrics.phpt (Span metrics is safely converted to numerics without errors or exceptions)' time='0.0175'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/svc_auto_tag_otel.phpt (OTEL_SERVICE_NAME counts as user-defined (emits svc.user:true))' time='0.0155'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_05.phpt (Gracefully handle out-of-sync spans in closure itself [user])' time='0.0223'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/svc_user_tag.phpt (Process tags include svc.user:true when DD_SERVICE is set)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/errors_are_flagged_from_userland.phpt (Errors from userland will be flagged on span)' time='0.0162'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_default.phpt (Test get_memory_limit() returning correct values)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias.phpt (dd_trace_function() is aliased to DDTrace\trace_function())' time='0.0147'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/active_span.phpt (DDTrace\active_span basic functionality)' time='0.0245'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/span_resource_serialization.phpt (Resource is replaced by name if null-ish)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_duplicate_ip_headers.phpt (Verify the right span tags are present when multiple XFF headers are provided.)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_03.phpt (Gracefully handle out-of-sync spans from traced function [user])' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging.phpt (Startup logging is enabled by default)' time='0.0408'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_methods.phpt (Keep spans in limited mode (userland methods))' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_log_file.phpt (Using DD_TRACE_LOG_FILE)' time='0.0235'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_from_user_error_handler_internal.phpt (Exceptions from user error handler are tracked for instrumented internal functions)' time='0.0120'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_coms_empty_stacks_correctly_recycled.phpt (Coms test no memory leaks with empty data store)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_userland_root_span.phpt (Userland root spans are automatically flushed when auto-flushing enabled)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/alias_logs.phpt (Logs aliases are correctly handled)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/non-zero_duration.phpt (Test that the sandbox API has non-zero durations)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_failure_02.phpt (Test \datadog\appsec\v2\track_user_login_failure without metadata)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_01.phpt (Gracefully handle out-of-sync spans from traced function [internal])' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/runtime_ini_env_version_change.phpt (Change the env and version INIs at runtime)' time='0.0158'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/vm_var_types_return.phpt (VM variable types are handled properly for return)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/try_drop_span_root.phpt (Test try_drop_span() on root span)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_002.phpt (E_ERROR fatal errors are tracked from hitting the memory limit)' time='0.0276'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/svc_src_inheritance.phpt (Child spans inherit _dd.svc_src from parent at creation time)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_using_function.phpt (deferred loading dispatch can be overridden)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/flush-autofinish.phpt (Negative duration for dropped spans)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush.phpt (Spans are automatically flushed when auto-flushing enabled)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr.phpt (Extract client IP address (no ip header set))' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/return_by_ref.phpt (Functions that return by reference are instrumented)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_server_values.phpt (Test invalid $_SERVER values are properly ignored)' time='0.0351'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_functions.phpt (Keep spans in limited mode (userland functions))' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sidecar_connection_mode_auto.phpt (Sidecar connection in auto mode (default))' time='0.0249'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_failure_01.phpt (Test \datadog\appsec\v2\track_user_login_failure)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/internal_hook_jit.phpt (Test internal functions are hooked within JIT)' time='0.0290'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_on_close.phpt (Test onClose SpanData handler)' time='0.0161'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_06.phpt (Gracefully handle out-of-sync spans in closure itself [user][default properties])' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/track_user_login_success_04.phpt (Test \datadog\appsec\v2\track_user_login_success id is not mandatory on user object)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_does_not_close_span_that_catches.phpt (Exceptions do not close the span that catches it)' time='0.0120'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_02.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_disables_tracing.phpt (Auto-flushing will not instrument while flushing)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extension_disabled.phpt (Sanity check when extension is disabled)' time='0.0112'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exit_and_drop_span.phpt (Exit gracefully handles a dropped span)' time='0.0167'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_01.phpt (Invalid referrer hostname from HTTP headers)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties.phpt (Span properties defaults to values if not explicitly set (functions))' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='0.2075'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_sandbox_exception.phpt (Auto-flushing will sandbox an exception thrown from the tracer flush)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_by_default.phpt (Test \DDTrace\set_user with propagation enabled by default through configuration)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/drop_spans.phpt (Span is dropped when tracing closure returns false)' time='0.0234'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ip_collection_01.phpt (Client IP should not be collected if DD_TRACE_CLIENT_IP_ENABLED/dd_trace.client_ip_enabled is not set)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_internal.phpt (DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_tracer_is_limited_memory.phpt (dd_trace_tracer_is_limited() limits the tracer with a memory limit)' time='0.0286'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_explicit_reimplement.phpt ([Sandbox] Hook implementations of interface methods on all direct implementors)' time='0.0158'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/start_span_without_closing.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit-retval.phpt (Ensure tracing closure&#039;s $retval arg is null if invoked due to exit())' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_with_removed_exception.phpt (Unset, nulled and generally invalid data in exception property is ignored)' time='0.0117'>
-<skipped>: test only works before 7.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_alias.phpt (dd_trace_method() is aliased to DDTrace\trace_method())' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/get_last_error.phpt (Existing errors are kept)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_json.phpt (Startup logging from JSON fetched at runtime)' time='0.015'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_tracing_closure_and_original_call.phpt (Exceptions thrown in tracing closure and original call)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/peer_service_honor_user_value.phpt (If peer.service is already set by the user, honor it)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_missing_interface.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_02.phpt (URL with special characters in host part)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_binds_called_object.phpt (DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_ini.phpt (Extract client IP address (ip header set))' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method.phpt (DDTrace\trace_method() can trace with internal spans)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/set_distributed_tracing_context_wrong_param.phpt (Wrong tags parameter passed to set_distributed_tracing_context)' time='0.0262'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/preinitialized_tracing_of_method.phpt ([Prehook regression] Trace public static method)' time='0.0135'>
+<skipped>: Not a supported scenario anymore</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_error.phpt (dd_trace_serialize_msgpack() error conditions)' time='0.0152'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_original_call_rethrown_in_tracing_closure.phpt (Exceptions from original call rethrown in tracing closure)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_whitelist.phpt (Root span with query params whitelist)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_multicatch.phpt (Exceptions are handled with multi-catch syntax)' time='0.0280'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/bailout_double_hook_clear.phpt (Bailout during hook END should not cause double-clear of span (internal function))' time='0.0261'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_drops_invalid_keys.phpt (Invalid (non-string) keys in span metadata are dropped)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/referrer_extraction_04.phpt (Empty referrer hostname from HTTP headers)' time='0.0157'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_closed_spans_count.phpt (dd_trace_closed_spans_count() tracks closed spans from userland and C-level)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_parent_id_invalid_rhs_refcount.phpt (Invalid root span parentId assignment does not decref the RHS value)' time='0.017'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties_method.phpt (Span properties defaults to values if not explicitly set (methods))' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context_noenv.phpt (Test the output of \DDTrace\current_context without env variables.)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_error_log.phpt (Exception in tracing closure gets logged)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inherit_meta_from_parent.phpt (Inherit some global metadata from parent span)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_functions.phpt (Keep spans in limited mode (internal functions))' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/logging_default_value.phpt (Assess that the log integration is disabled by default)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_no_args.phpt (Variadic arguments are passed to tracing closure when no arguments exist in function signature)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_create_observer.phpt (Test observing span creation)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_yield_from.phpt (Functions that return generators with &#039;yield from&#039; are instrumented)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/startup_logging_diagnostics.phpt (Startup logging diagnostics)' time='0.0422'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/memory_limit_graceful_bailout.phpt (The tracer bails out gracefully when memory_limit INI is reached in shutdown hook)' time='0.0263'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ust.phpt (Unified service tagging removes version from spans)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_in_object.phpt (Test tracing generators within objects)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array.phpt (Decoding nested array POST data)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_003.phpt (E_ERROR fatal errors are tracked from hitting the max execution time)' time='1.0254'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.hook_method" tests="38" failures="0" errors="0" skip="0" time="0.5239">
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_01.phpt (DDTrace\hook_method prehook error is sandboxed)' time='0.0211'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_with_finally.phpt (Return value from finally block is passed to tracing closure)' time='0.0264'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_05.phpt (A call to trace_method from hook_method prehook has non-static closure)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/cake_02.phpt (Test that we don&#039;t leak in a set-up similar to CakePHP)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_01.phpt (hook_method prehook is called with the correct scope (no override))' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/new_static.phpt (New static instantiates from expected class)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_05.phpt (DDTrace\hook_method posthook is passed the correct retval)' time='0.0244'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator.phpt (Functions that return generators are instrumented)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_02.phpt (DDTrace\hook_method prehook exception is sandboxed (debug))' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_tracing_closure.phpt (Fatal errors are ignored inside a tracing closure (PHP 7+))' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_01.phpt (DDTrace\hook_method posthook error is sandboxed)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_02.phpt (Gracefully handle out-of-sync spans from traced function [internal][default properties])' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_02.phpt (DDTrace\hook_method prehook does not mess up spans with children)' time='0.0146'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_attach_exception.phpt (Auto-flushing will attach an exception during exception cleanup)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_03.phpt (DDTrace\hook_method posthook is passed the correct args)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_fatal.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_03.phpt (DDTrace\hook_method prehook is passed the correct args)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_005.phpt (All open internal spans are marked with the fatal error)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_01.phpt (DDTrace\hook_method posthook is called with an exception; args are still good)' time='0.0151'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook.phpt ([Sandbox] Hook implementations of interface methods on direct implementor only)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_02.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_exception.phpt (Exceptions are handled from a generator context)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_02.phpt (DDTrace\hook_method posthook exception is sandboxed)' time='0.0149'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_methods.phpt (Keep spans in limited mode (internal methods))' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_02.phpt (DDTrace\hook_method prehook is passed the correct args (variadic))' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/manual_flush.phpt (Spans are not automatically flushed when auto-flushing disabled)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_03.phpt (hook_method prehook is called with the correct scope (parent))' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/die_in_sandbox.phpt (Die()&#039;ing in the sandbox is properly caught)' time='0.0274'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_01.phpt (DDTrace\hook_method posthook does not mess up span ids)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/cake_01.phpt (Test that we don&#039;t have a sigsegv in a set-up similar to CakePHP)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_access_01.phpt (hook_method prehook should have access only to public members)' time='0.0196'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_are_passed_to_the_tracing_closure.phpt (Exceptions from original call are passed to tracing closure)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/hook_extended_internal_class.phpt (Extended internal classes are hookable)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook_internal.phpt ([Sandbox] Hook implementations of internal interface methods)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_04.phpt (DDTrace\hook_method prehook is passed the correct args with inheritance)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_limit.phpt (Ensure the hook limit is not exceeded)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_02.phpt (DDTrace\hook_method posthook error is sandboxed (debug))' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/retval_is_null_with_exception.phpt (The return value is null when an exception is thrown in the original call)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/02.phpt (DDTrace\hook_method returns false quietly when no hook is passed)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handling.phpt (Exceptions get attached to spans)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_02.phpt (DDTrace\hook_method posthook does not mess up spans with children)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/static_tracing_closures_will_not_bind_this.phpt (Static tracing closures will not bind $this)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/01.phpt (DDTrace\hook_method supports both hooks simultaneously)' time='0.014'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook_inherit.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.0120'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_01.phpt (hook_method posthook is called with the correct scope (no override))' time='0.0164'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_for_correct_catch_block.phpt (Exceptions are handled for the correct catch block)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/03.phpt (DDTrace\hook_method returns false with diagnostic when no hook is passed)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_attempt_loading_once.phpt (deferred loading only happens once, even if dispatch is not overwritten)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_06.phpt (Nested closure targeting method call 01 (posthook))' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_ge_php_84.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.0130'>
+<skipped>: test only stable on PHP &gt;= 8.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_01.phpt (DDTrace\hook_method prehook does not mess up span ids)' time='0.0153'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_004.phpt (E_USER_ERROR fatal errors are tracked from userland)' time='0.0184'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_02.phpt (DDTrace\hook_method prehook error is sandboxed (debug))' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_multiple.phpt ([Sandbox] Hook implementations of interface methods with multiple parent abstract methods of the same name)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_02.phpt (DDTrace\hook_method posthook is called at exit (shutdown handler))' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_userland.phpt (DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_01.phpt (DDTrace\hook_method prehook exception is sandboxed)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_shutdown.phpt (Fatal errors are ignored in shutdown handler)' time='0.0249'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_01.phpt (DDTrace\hook_method posthook is called at exit)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_properties.phpt (Span properties are safely converted to strings without errors or exceptions)' time='0.0120'>
+<skipped>: test only works before 7.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_01.phpt (DDTrace\hook_method posthook)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_and_errors_are_ignored_in_tracing_closure.phpt (Exceptions and errors are ignored when inside a tracing closure)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_02.phpt (DDTrace\hook_method posthook is passed the correct args (variadic))' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_correct_catch_frame.phpt (Exceptions are handled in the correct catch frame)' time='0.0161'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_04.phpt (DDTrace\hook_method posthook is passed the correct args with inheritance)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.0258'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_02.phpt (hook_method prehook is called with the correct scope (parent))' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_args_internal.phpt (Variadic arguments are passed to tracing closure for internal functions)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_access_01.phpt (hook_method posthook should have access only to public members)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_complex.phpt (DDTrace\trace_function() can trace with internal spans)' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_03.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0159'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook.phpt ([Sandbox] Hook implementations of interface methods)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_01.phpt (DDTrace\hook_method prehook)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_return.phpt (Functions that use return with yield are instrumented)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_07.phpt (Nested closure targeting method call 02 (posthook))' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_04.phpt (Gracefully handle out-of-sync spans from traced function [user][default properties])' time='0.0169'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.regression" tests="42" failures="0" errors="0" skip="1" time="0.7934">
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/disable_tracing_disables_tracing.phpt ([Sandbox regression] Disable tracing disables all tracing from happening)' time='0.0154'>
+<testsuite name="php.tmp.build_extension.tests.ext.sandbox.regression" tests="42" failures="0" errors="0" skip="0" time="0.8639">
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_method_or_function_that_will_exist_later.phpt ([Sandbox regression] Methods and functions are traced before definedx)' time='0.0235'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/return_value_passed.phpt ([Sandbox regression] Return value passed to tracing closure)' time='0.0169'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_accessing_outside_variables.phpt ([Sandbox regression] Tracing closure safely uses variables from outside scope)' time='0.0213'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_returning_array.phpt ([Sandbox regression] Method can be traced and called from tracing closure)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/protected_method_hook.phpt ([Sandbox regression] Trace protected method)' time='0.0181'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/handle_many_hooks.phpt (The tracer should not crash when many hooks are installed)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/very_nested_functions.phpt ([Sandbox regression] Trace deeply-nested function calls (PHP 7))' time='0.0376'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_is_limited_hard.phpt ([Sandbox regression] dd_trace_tracer_is_limited() limits the tracer with a hard span limit)' time='0.2035'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/uncaught_exception_with_finally.phpt (Finally block should only be entered once)' time='0.0211'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/allow_overriding_before_overrided_methods_functions_are_defined.phpt ([Sandbox regression] Trace a function and method before it is defined)' time='0.0145'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/abstract_method_hook.phpt ([Sandbox regression] Hook implementations of abstract methods)' time='0.0176'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_construct.phpt ([Sandbox regression] Trace class constructor)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_set_inside_object_methods.phpt ([Sandbox regression] Tracing closure set from inside non-static method)' time='0.0204'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/limiter_reset_flush_with_open_spans.phpt (Starting a trace in a prehook and closing it in the posthook while an active one exists does not confuse the limiter)' time='0.0193'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_configured_overrides.phpt ([Sandbox regression] Traced functions and methods are untraced with reset)' time='0.0145'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_configured_overrides.phpt ([Sandbox regression] Traced functions and methods are untraced with reset)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/class_resolver_bailout_hook.phpt (Assert bailouts are gracefully handled within class autoloading)' time='0.0324'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_limiter_reset_flush.phpt ([regression] The limiter must reset after a flush)' time='0.0149'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_static_method.phpt ([Sandbox regression] Trace public static method)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_method_hook.phpt ([Sandbox regression] Userland method is traced)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_property_access_hook.phpt ([Sandbox regression] Private and protected properties are accessed from a tracing closure)' time='0.0249'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_method_or_function_that_will_exist_later.phpt ([Sandbox regression] Methods and functions are traced before definedx)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_is_limited_hard.phpt ([Sandbox regression] dd_trace_tracer_is_limited() limits the tracer with a hard span limit)' time='0.2143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/multiple_instrumentations.phpt ([Sandbox regression] Multiple functions and methods are traced)' time='0.0176'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trampoline_install_fake_closure_hook.phpt (Test installing hook on trampoline fake closure)' time='0.0240'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/do_not_check_if_class_or_function_exists_by_default.phpt ([Sandbox regression] Do not throw exceptions when verifying if method or function exists)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/throw_exception.phpt ([Sandbox regression] Traced userland function catches and rethrows exception)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_accessing_outside_variables.phpt ([Sandbox regression] Tracing closure safely uses variables from outside scope)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/nested_dropped_spans.phpt ([regression] Properly skip nested dropped spans)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/destructor_called_when_this_gets_out_of_scope.phpt ([Sandbox regression] Destructor is called when object goes out of scope)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_invoked_via_reflection.phpt ([Sandbox regression] Method invoked via reflection correctly returns created object)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_method_access_hook.phpt ([Sandbox regression] Private and protected methods are called from a tracing closure)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_construct.phpt ([Sandbox regression] Trace class constructor)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/extension_disabled.phpt ([Sandbox regression] Tracing closures do not run when extension is disabled)' time='0.0114'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/dd_trace_tracer_limiter_reset_flush.phpt ([regression] The limiter must reset after a flush)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/uncaught_exception_with_finally.phpt (Finally block should only be entered once)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_method_hook.phpt ([Sandbox regression] Trace method with params)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_method_hook.phpt ([Sandbox regression] Trace method with params)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/extension_disabled.phpt ([Sandbox regression] Tracing closures do not run when extension is disabled)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/class_resolver_bailout_hook.phpt (Assert bailouts are gracefully handled within class autoloading)' time='0.0232'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_function_hook.phpt ([Sandbox regression] Trace function with params)' time='0.0120'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/recursion.phpt ([Sandbox regression] Recursive calls will trace only outermost invocation)' time='0.0248'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/return_value_passed.phpt ([Sandbox regression] Return value passed to tracing closure)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/closure_set_inside_object_methods.phpt ([Sandbox regression] Tracing closure set from inside non-static method)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_self_access.phpt ([Sandbox regression] Tracing closure accesses private static method)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_property_access_hook.phpt ([Sandbox regression] Private and protected properties are accessed from a tracing closure)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/recursion.phpt ([Sandbox regression] Recursive calls will trace only outermost invocation)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trace_static_method.phpt ([Sandbox regression] Trace public static method)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/used_dispatch_should_not_free.phpt ([Sandbox regression] Override traced function from within itself)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_method_hook.phpt ([Sandbox regression] Trace private method)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_returning_array.phpt ([Sandbox regression] Method can be traced and called from tracing closure)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/case_insensitive_method_hook.phpt ([Sandbox regression] Trace case-insensitive method from a child class)' time='0.014'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/variable_length_parameter_list.phpt ([Sandbox regression] Trace variadic functions and methods)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/method_invoked_via_reflection.phpt ([Sandbox regression] Method invoked via reflection correctly returns created object)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/handle_many_hooks.phpt (The tracer should not crash when many hooks are installed)' time='0.0161'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/protected_method_hook.phpt ([Sandbox regression] Trace protected method)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/limiter_reset_flush_with_open_spans.phpt (Starting a trace in a prehook and closing it in the posthook while an active one exists does not confuse the limiter)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/throw_exception.phpt ([Sandbox regression] Traced userland function catches and rethrows exception)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/multiple_instrumentations.phpt ([Sandbox regression] Multiple functions and methods are traced)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/namespaces.phpt ([Sandbox regression] Namespaced functions and methods are traced)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_method_hook.phpt ([Sandbox regression] Trace private method)' time='0.0145'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/abstract_method_hook.phpt ([Sandbox regression] Hook implementations of abstract methods)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/access_modifier_method_access_hook.phpt ([Sandbox regression] Private and protected methods are called from a tracing closure)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_function_hook.phpt ([Sandbox regression] Userland function is traced)' time='0.0167'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/disable_tracing_disables_tracing.phpt ([Sandbox regression] Disable tracing disables all tracing from happening)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/very_nested_functions.phpt ([Sandbox regression] Trace deeply-nested function calls (PHP 7))' time='0.034'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_method_defined_in_parent.phpt ([Sandbox regression] Trace extended method when called from parent class)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/nested_dropped_spans.phpt ([regression] Properly skip nested dropped spans)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/allow_overriding_before_overrided_methods_functions_are_defined.phpt ([Sandbox regression] Trace a function and method before it is defined)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/trampoline_install_fake_closure_hook.phpt (Test installing hook on trampoline fake closure)' time='0.0119'>
-<skipped>: The ... operator is a PHP 8.1+ feature</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/namespaces.phpt ([Sandbox regression] Namespaced functions and methods are traced)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_function_tracing.phpt ([Sandbox regression] Untrace a function)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/reset_function_tracing.phpt ([Sandbox regression] Untrace a function)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/used_dispatch_should_not_free.phpt ([Sandbox regression] Override traced function from within itself)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/do_not_check_if_class_or_function_exists_by_default.phpt ([Sandbox regression] Do not throw exceptions when verifying if method or function exists)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/overriding_method_defined_in_parent.phpt ([Sandbox regression] Trace extended method when called from parent class)' time='0.0115'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/case_insensitive_method_hook.phpt ([Sandbox regression] Trace case-insensitive method from a child class)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/private_self_access.phpt ([Sandbox regression] Tracing closure accesses private static method)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/destructor_called_when_this_gets_out_of_scope.phpt ([Sandbox regression] Destructor is called when object goes out of scope)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/variable_length_parameter_list.phpt ([Sandbox regression] Trace variadic functions and methods)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_function_hook.phpt ([Sandbox regression] Userland function is traced)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-regression/with_params_function_hook.phpt ([Sandbox regression] Trace function with params)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/sandbox-regression/simple_method_hook.phpt ([Sandbox regression] Userland method is traced)' time='0.0124'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.priority_sampling" tests="37" failures="0" errors="0" skip="0" time="0.6434">
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/029-ksr-tag-small-rate-formatting.phpt (_dd.p.ksr uses decimal notation (not scientific) for very small sampling rates)' time='0.025'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/024-deterministic-sampling.phpt (run sampling algorithm on multiple trace IDs and ensure that the results are deterministic)' time='0.0144'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-regex-rule.phpt (Invalid regex: default sampling rate applies)' time='0.0283'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/015-rule-resource-reject.phpt (priority_sampling rule with resource reject)' time='0.0396'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/018-manual.drop.phpt (priority_sampling with manual.drop)' time='0.0125'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/026-ksr-tag-default-sampling.phpt (_dd.p.ksr propagated tag is NOT set for default sampling (only for explicit agent rates))' time='0.0119'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/010-rule-name-service-reject.phpt (priority_sampling rule with name and service reject)' time='0.0298'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/031-ksr-tag-exact-sixth-decimal.phpt (_dd.p.ksr preserves exact 0.000001 rate without rounding away)' time='0.0119'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/008-rule-service-reject.phpt (priority_sampling rule with service reject)' time='0.0236'>
+<testsuite name="php.tmp.build_extension.tests.ext" tests="136" failures="0" errors="0" skip="3" time="30.1509">
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_only_allowed_params.phpt (Only param whose name is in DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED shouldn&#039;t be redacted)' time='0.0263'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/009-rule-name-service.phpt (priority_sampling rule with name and service match)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping.phpt (Remap http.response.status_code to http.status_code - OTel HTTP Semantic Convention &gt;= 1.21.0)' time='0.0272'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/021-rule-name-as-glob-with-question-mark.phpt (priority_sampling rule with name match, using glob)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip.phpt (Verify the client ip is added from the peer IP  when no XFF header is available.)' time='0.0278'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/022-rule-name-as-glob-with-multiple-criterias.phpt (priority_sampling rule with name match, using glob)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param.phpt (Empty post request)' time='0.0195'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/019-manual.keep.phpt (priority_sampling with manual.keep)' time='0.0148'>
+<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_override_default.phpt (Test \DDTrace\set_user with metadata and with usr.id as a distributed tag)' time='0.0232'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/017-rule-tag-reject.phpt (priority_sampling rule with tag reject)' time='0.0241'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_duplicate_ip_headers.phpt (Verify the right span tags are present when multiple XFF headers are provided.)' time='0.0239'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/asm-standalone.phpt (priority_sampling is ignored when asm standalone is enabled)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0308'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/028-ksr-tag-formatting.phpt (_dd.p.ksr propagated tag formats rate with up to 6 decimal digits and no trailing zeros)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/flush-autofinish.phpt (Negative duration for dropped spans)' time='0.0236'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-json-rule.phpt (Invalid rule json: default sampling rate applies)' time='0.0249'>
+<testcase name='tmp/build_extension/tests/ext/set_distributed_tracing_context_wrong_param.phpt (Wrong tags parameter passed to set_distributed_tracing_context)' time='0.0416'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/gh-1828.phpt (priority_sampling regression for GH-1828)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_simple_whitelist.phpt (Post fields parameters should be retrieved and redacted if needed v2)' time='0.0327'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/025-ksr-tag-rule-sampling.phpt (_dd.p.ksr propagated tag is set for rule-based sampling)' time='0.0263'>
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0324'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/011-preset.phpt (priority_sampling preset decision retained)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/generate_128_bit_trace_id.phpt (Test 128 bit generation)' time='0.0237'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/003-user-keep.phpt (priority_sampling user keep)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/traced_attribute.phpt (Test tracing via attributes)' time='0.0389'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/005-rule-name.phpt (priority_sampling rule with name match)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array_allowed.phpt (Values of an array are not redacted when the array base is in the DD_TRACE_HTTP_POST_DATA_PARAM_ALLOWED env var)' time='0.0232'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/001-default-sampling.phpt (priority_sampling default sampling)' time='0.0115'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_tracer_is_limited_memory.phpt (dd_trace_tracer_is_limited() limits the tracer with a memory limit)' time='0.0322'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/004-rule-basic.phpt (priority_sampling basic rule)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_02.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.0191'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/manual_global_override.phpt (Global explicitly set priority sampling must be respected)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_enabled.phpt (Dump backtrace when segmentation fault signal is raised and config enables it)' time='0.1072'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/007-rule-service.phpt (priority_sampling rule with service match)' time='0.0245'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0154'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/030-ksr-tag-rounding-boundary.phpt (_dd.p.ksr rounds small rates correctly at 6-decimal boundary)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context_noenv.phpt (Test the output of \DDTrace\current_context without env variables.)' time='0.0154'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/027-ksr-tag-not-set-manual.phpt (_dd.p.ksr propagated tag is NOT set for manual sampling)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging.phpt (Startup logging is enabled by default)' time='0.0597'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/006-rule-name-reject.phpt (priority_sampling rule with name reject)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/from_php_7_3_test_user_streams_consumed_bug.phpt (Testing user filter on streams)' time='0.0297'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/014-rule-resource.phpt (priority_sampling rule with resource match)' time='0.0282'>
+<testcase name='tmp/build_extension/tests/ext/try_drop_span_root.phpt (Test try_drop_span() on root span)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/032-ksr-tag-below-precision-rounds-to-zero.phpt (_dd.p.ksr rounds rate below 6-decimal precision to 0)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/force_flush_traces.phpt (Force flush the traces mid-way through a trace)' time='0.0263'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/016-rule-tag.phpt (priority_sampling rule with tag match)' time='0.026'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_coms_empty_stacks_correctly_recycled.phpt (Coms test no memory leaks with empty data store)' time='0.0170'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/013-rule-service-mapped.phpt (priority_sampling service mapping)' time='0.0124'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/023-manual.keep-distributed_overwrite.phpt (manual.keep will overwrite a rejected distributed sampling decision)' time='0.0121'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/002-user-reject.phpt (priority_sampling user reject)' time='0.0135'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/012-default.phpt (priority_sampling default decision retained)' time='0.0145'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/priority_sampling/020-rule-nonroot.phpt (priority_sampling rule with match on non-root spans)' time='0.0251'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_set.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when set)' time='0.0138'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.prehook" tests="20" failures="0" errors="0" skip="0" time="0.2796">
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variable_length_parameter_list.phpt ([Prehook regression] Trace variadic functions and methods)' time='0.0233'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_03.phpt (Client IP should be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.0159'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_error_log.phpt ([Prehook Regression] Exception in tracing closure gets logged)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_no_param_set.phpt (Empty post request without whitelisting)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/drop_spans.phpt ([Prehook Regression] Span is dropped when tracing closure returns false)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_disabled_default.phpt (Assesses the opt-in behavior of peer service)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exceptions_and_errors_are_ignored_in_tracing_closure.phpt ([Prehook Regression] Exceptions and errors are ignored when inside a tracing closure)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/traced_attribute_delayed.phpt (Test delayed resolution of tracing attributes)' time='0.0248'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method.phpt ([Prehook Regression] DDTrace\trace_method() can trace with internal spans)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/span_with_removed_exception.phpt (Unset, nulled and generally invalid data in exception property is ignored)' time='0.0128'>
+<skipped>: test only works before 7.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/trace_static_method.phpt ([Prehook regression] Trace public static method)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_low_user_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0502'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_method_binds_called_object.phpt ([Prehook Regression] DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/show_actual_active_span_in_hook.phpt (Test hooking preserves the active span)' time='0.0198'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exit_and_drop_span.phpt ([Prehook Regression] Exit gracefully handles a dropped span)' time='0.0159'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_001.phpt (background sender happy path)' time='0.0276'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/exception_handling.phpt ([Prehook Regression] Exceptions get attached to spans)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/test_special_attributes.phpt (Reserved OTel attributes that have special meaning)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/variadic_args_internal.phpt ([Prehook] Variadic arguments are passed to tracing closure for internal functions)' time='0.014'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_x_forwarded_for.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_userland.phpt ([Prehook Regression] DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_serialization_with_links.phpt (Serialization of a span with multiple span links)' time='0.0250'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/args_copy_before_mutation.phpt ([Prehook] Arguments are copied before mutation can occur)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='5.3013'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/keep_spans_in_limited_tracing_userland_functions.phpt ([Prehook Regression] Keep spans in limited mode (userland functions))' time='0.0188'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_default.phpt (Test get_memory_limit() returning correct values for default)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/close_on_exit.phpt ([Prehook Regression] Run sandbox closures for open spans on exit)' time='0.0146'>
+<testcase name='tmp/build_extension/tests/ext/test_special_attributes_bis.phpt (Reserved OTel attributes that have special meaning)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_retval.phpt ([Prehook] Tracing closure does not have access to return value)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/segfault_backtrace_disabled.phpt (Don&#039;t dump backtrace when segmentation fault signal is raised and config is default)' time='0.0829'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/dd_trace_function_internal.phpt ([Prehook Regression] DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_implicit_array_key.phpt (Post fields with a implicit array keys)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/new_static.phpt ([Prehook Regression] New static instantiates from expected class)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/span_with_parent_property_access.phpt (Test DDTrace\SpanData::$parent)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_method_access_hook.phpt ([Prehook regression] Private and protected methods are called from a tracing closure)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/retrieve_128_bit_trace_id.phpt (Test 128-bit trace id retrieval)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/closure_arg_exception.phpt ([Prehook] Tracing closure does not have access to thrown exception)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/dropped_spans_have_negative_duration.phpt (Negative duration for dropped spans)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox-prehook/access_modifier_property_access_hook.phpt ([Prehook regression] Private and protected properties are accessed from a tracing closure)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_0_percent.phpt (Test get_memory_limit() returning correct values)' time='0.0127'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox" tests="90" failures="0" errors="0" skip="3" time="2.2954">
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_methods.phpt (Keep spans in limited mode (internal methods))' time='0.015'>
+<testcase name='tmp/build_extension/tests/ext/request_timeout_01.phpt (A PHP request timeout does not leak/segfault (run with leak detection))' time='1.0269'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_sandbox_exception.phpt (Auto-flushing will sandbox an exception thrown from the tracer flush)' time='0.0151'>
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_high_limit.phpt (Test dd_trace_check_memory_under_limit() returning correct values)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_internal.phpt (DDTrace\trace_function() can trace internal functions with internal spans)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_use_first_available_tag.phpt (Use the first available tag from peerServiceSources to set peer.service)' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/static_tracing_closures_will_not_bind_this.phpt (Static tracing closures will not bind $this)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/base_service.phpt (Properly set _dd.base_service when service name is manually changed)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit.phpt (Run sandbox closures for open spans on exit)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/active_span.phpt (DDTrace\active_span basic functionality)' time='0.0589'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exit_and_drop_span.phpt (Exit gracefully handles a dropped span)' time='0.0162'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_useragent.phpt (Verify the user agent is added to the root span on serialization.)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/span_clone.phpt (Clone DDTrace\SpanData)' time='0.0241'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_json.phpt (Startup logging from JSON fetched at runtime)' time='0.0207'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/die_in_sandbox.phpt (Die()&#039;ing in the sandbox is properly caught)' time='0.0242'>
+<testcase name='tmp/build_extension/tests/ext/ust_via_ddtags.phpt (Test that service tags in DD_TAGS are ignored but version and env tags are set)' time='0.0155'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_closed_spans_count.phpt (dd_trace_closed_spans_count() tracks closed spans from userland and C-level)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/root_span_http_client_ip_custom_header.phpt (Verify the client ip is added when x-forwarded-for header is present.)' time='0.0153'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_from_user_error_handler_internal.phpt (Exceptions from user error handler are tracked for instrumented internal functions)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_ini.phpt (Extract client IP address (ip header set))' time='0.0196'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_and_errors_are_ignored_in_tracing_closure.phpt (Exceptions and errors are ignored when inside a tracing closure)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/traced_internal_functions_override_01.phpt (Ensure that if a user adds an internal function we already trace to traced internal functions list that it doesn&#039;t misbehave)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_04.phpt (Gracefully handle out-of-sync spans from traced function [user][default properties])' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_array.phpt (Decoding nested array POST data)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/retval_is_null_with_exception.phpt (The return value is null when an exception is thrown in the original call)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_span_data_get_link.phpt (DDTrace\SpanData::getLink basic functionality)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/vm_var_types_return.phpt (VM variable types are handled properly for return)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_diagnostics.phpt (Startup logging diagnostics)' time='0.0589'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_original_call_rethrown_in_tracing_closure.phpt (Exceptions from original call rethrown in tracing closure)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr.phpt (Extract client IP address (no ip header set))' time='0.0144'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush.phpt (Spans are automatically flushed when auto-flushing enabled)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_sources_not_serialized_when_unset.phpt (Value of internal span&#039;s peerServiceSource is not added to the serialized version of the span when not set)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/span_resource_serialization.phpt (Resource is replaced by name if null-ish)' time='0.0148'>
+<testcase name='tmp/build_extension/tests/ext/meta_struct.phpt (Add meta struct string)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook_internal.phpt ([Sandbox] Hook implementations of internal interface methods)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_id_in_meta.phpt (dd_trace_serialize_msgpack() properly handles span_id, trace_id and parent_id, but only outside of nested arrays)' time='0.0264'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_drops_invalid_keys.phpt (Invalid (non-string) keys in span metadata are dropped)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_02.phpt (Client IP should not be collected if env DD_TRACE_CLIENT_IP_ENABLED is set to true)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_properties.phpt (Span properties are safely converted to strings without errors or exceptions)' time='0.012'>
-<skipped>: test only works before 7.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_01.phpt (Invalid referrer hostname from HTTP headers)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/preinitialized_tracing_of_method.phpt ([Prehook regression] Trace public static method)' time='0.012'>
-<skipped>: Not a supported scenario anymore</skipped>
+<testcase name='tmp/build_extension/tests/ext/ust_precedence_over_ddtags.phpt (Test that individual environment variables take precedence over DD_TAGS)' time='0.0313'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_for_correct_catch_block.phpt (Exceptions are handled for the correct catch block)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0250'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_004.phpt (E_USER_ERROR fatal errors are tracked from userland)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_windows.phpt (Send crashtracker report when segmentation fault signal is raised and config enables it)' time='0.0210'>
+<skipped>: test only runs on Windows</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/non-zero_duration.phpt (Test that the sandbox API has non-zero durations)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_honor_user_value.phpt (If peer.service is already set by the user, honor it)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/errors_are_flagged_from_userland.phpt (Errors from userland will be flagged on span)' time='0.0146'>
+<testcase name='tmp/build_extension/tests/ext/start_span_without_closing_autofinish.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/get_last_error.phpt (Existing errors are kept)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_whitelist.phpt (Root span with query params whitelist)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_02.phpt (Gracefully handle out-of-sync spans from traced function [internal][default properties])' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/alias_logs.phpt (Logs aliases are correctly handled)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_shutdown.phpt (Fatal errors are ignored in shutdown handler)' time='0.0246'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_03.phpt (URL without host part in referrer)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_complex.phpt (DDTrace\trace_function() can trace with internal spans)' time='0.0144'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_remapping.phpt (Properly remap peer service&#039;s sources based on DD_TRACE_PEER_SERVICE_MAPPING)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_005.phpt (All open internal spans are marked with the fatal error)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_send_traces_via_thread_002.phpt (background sender should reject msgpack array prefix that does not match expected number of traces)' time='0.0259'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_in_tracing_closure_and_original_call.phpt (Exceptions thrown in tracing closure and original call)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/disabling_root_span_generation_at_runtime.phpt (Disabling root span removes the root span properly)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook_inherit.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/read_c_configuration.phpt (Ensure we can read C configuration data)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_attempt_loading_once.phpt (deferred loading only happens once, even if dispatch is not overwritten)' time='0.0116'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_precedence.phpt (Ensure the ip header priority is followed)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/manual_flush.phpt (Spans are not automatically flushed when auto-flushing disabled)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/otel_config_remapping.phpt (Test OpenTelemetry config remapping)' time='0.0271'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/abstract_trait_hook.phpt ([Sandbox] Hook implementations of abstract trait methods are not supported)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/inherit_meta_from_parent.phpt (Inherit some global metadata from parent span)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_fatal.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/check_memory_under_limit_default.phpt (Test dd_trace_check_memory_under_limit() returning correct values for default)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_002.phpt (E_ERROR fatal errors are tracked from hitting the memory limit)' time='0.0244'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_05.phpt (IPv6 address in referrer header)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_is_defined.phpt (Exceptions in the tracing closure callback are always defined)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_04.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_hook.phpt ([Sandbox] Hook implementations of interface methods)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_absolute.phpt (Test get_memory_limit() returning correct values)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_01.phpt (Gracefully handle out-of-sync spans from traced function [internal])' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation.phpt (Root span with http.url and obfuscated query string)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_limit.phpt (Ensure the hook limit is not exceeded)' time='0.0138'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_header_to_meta.phpt (Headers values are mapped to expected tag key)' time='0.0148'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_args_internal.phpt (Variadic arguments are passed to tracing closure for internal functions)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/runtime_ini_env_version_change.phpt (Change the env and version INIs at runtime)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/variadic_no_args.phpt (Variadic arguments are passed to tracing closure when no arguments exist in function signature)' time='0.0149'>
+<testcase name='tmp/build_extension/tests/ext/extract_ip_addr_header_env.phpt (Extract client IP address (ip header set))' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_multicatch.phpt (Exceptions are handled with multi-catch syntax)' time='0.0261'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exceptions_are_passed_to_the_tracing_closure.phpt (Exceptions from original call are passed to tracing closure)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_json_config.phpt (Startup logging config from JSON fetched at runtime)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_yield_from.phpt (Functions that return generators with &#039;yield from&#039; are instrumented)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracestate_consumption.phpt (Distributed tracestate consumption should produce valid tracestate header)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/close-on-exit-retval.phpt (Ensure tracing closure&#039;s $retval arg is null if invoked due to exit())' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/start_span_with_all_properties.phpt (Set DDTrace\start_span() properties)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/return_by_ref.phpt (Functions that return by reference are instrumented)' time='0.0152'>
+<testcase name='tmp/build_extension/tests/ext/try_drop_span.phpt (Test try_drop_span())' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_in_correct_catch_frame.phpt (Exceptions are handled in the correct catch frame)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/set_user_without_propagation_override_default.phpt (Test \DDTrace\set_user doesn&#039;t propagate when overriding configuration)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_internal_functions.phpt (Keep spans in limited mode (internal functions))' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/extract_server_values.phpt (Test invalid $_SERVER values are properly ignored)' time='0.0344'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_003.phpt (E_ERROR fatal errors are tracked from hitting the max execution time)' time='1.0244'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_jit_tags.phpt ([crasht] opcache tags are attached to crash report)' time='5.2622'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_05.phpt (Gracefully handle out-of-sync spans in closure itself [user])' time='0.017'>
+<testcase name='tmp/build_extension/tests/ext/close_spans_until.phpt (Test DDTrace\close_spans_until)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handled_with_finally.phpt (Return value from finally block is passed to tracing closure)' time='0.0267'>
+<testcase name='tmp/build_extension/tests/ext/set_user_with_metadata.phpt (Test \DDTrace\set_user with metadata)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_06.phpt (Gracefully handle out-of-sync spans in closure itself [user][default properties])' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_without_query_params.phpt (Root span without query string in http.url)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/drop_spans.phpt (Span is dropped when tracing closure returns false)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/otel_http_status_code_remapping.phpt (Remap http.status_code metric to http.status_code meta - OTel HTTP Semantic Convention &lt; 1.21.0)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/new_static.phpt (New static instantiates from expected class)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_reference.phpt (dd_trace_serialize_msgpack() with references)' time='0.0257'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_userland.phpt (DDTrace\trace_function() can trace userland functions with internal spans)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/start_span_without_closing.phpt (Use DDTrace\close_span() on span started within internal span)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_error_log.phpt (Exception in tracing closure gets logged)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack_error.phpt (dd_trace_serialize_msgpack() error conditions)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias_overwrite.phpt (Calling DDTrace\trace_method() overwrites previous tracing functions in unresolved aliases)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_as_resource_names_no_host.phpt (root span with DD_TRACE_URL_AS_RESOURCE_NAMES_ENABLED (variant using SERVER_NAME))' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/cake_02.phpt (Test that we don&#039;t leak in a set-up similar to CakePHP)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_unlimited_default.phpt (Test get_memory_limit() returning correct values)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_explicit_reimplement.phpt ([Sandbox] Hook implementations of interface methods on all direct implementors)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/from_php_7_3_bug61728.phpt (Bug #61728 (PHP crash when calling ob_start in request_shutdown phase))' time='0.0252'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_are_tracked_001.phpt (E_ERROR fatal errors are tracked from internal function)' time='0.0192'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_04.phpt (Empty referrer hostname from HTTP headers)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook_multiple.phpt ([Sandbox] Hook implementations of interface methods with multiple parent abstract methods of the same name)' time='0.0135'>
+<testcase name='tmp/build_extension/tests/ext/otel_http_response_status_code_remapping_precedence.phpt (http.response.status_code takes precedence over http.status_code)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_using_function.phpt (deferred loading dispatch can be overridden)' time='0.0156'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_and_backtrace_are_mutually_exclusive.phpt (Settings &#039;datadog.log_backtrace&#039; and &#039;datadog.crashtracking_enabled&#039; are mutually exclusive)' time='0.0266'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metrics.phpt (Span metrics is safely converted to numerics without errors or exceptions)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_current_context.phpt (Test the output of \DDTrace\current_context)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/deferred_load_missing_interface.phpt (deferred loading doesn&#039;t crash if integration loading fails)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/set_user_with_propagation_by_default.phpt (Test \DDTrace\set_user with propagation enabled by default through configuration)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties_method.phpt (Span properties defaults to values if not explicitly set (methods))' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/get_memory_limit_set_by_percentage.phpt (Test get_memory_limit() returning correct values)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_userland_root_span.phpt (Userland root spans are automatically flushed when auto-flushing enabled)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/add_global_tag_on_userland_and_internal_spans.phpt (DDTrace\add_global_tag() on all sorts of spans)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/internal_hook_jit.phpt (Test internal functions are hooked within JIT)' time='0.0275'>
+<testcase name='tmp/build_extension/tests/ext/ust.phpt (Foo)' time='0.0163'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/cake_01.phpt (Test that we don&#039;t have a sigsegv in a set-up similar to CakePHP)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_disabled.phpt (Startup logging is disabled)' time='0.0499'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/interface_inherit_hook.phpt ([Sandbox] Hook implementations of interface methods on direct implementor only)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/startup_logging_config.phpt (Startup logging config)' time='0.0274'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/fatal_errors_ignored_in_tracing_closure.phpt (Fatal errors are ignored inside a tracing closure (PHP 7+))' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/sidecar_enabled.phpt (Sidecar should be enabled by default on PHP 8.4)' time='0.0123'>
+<skipped>: This tests is only for PHP 8.4</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_alias.phpt (dd_trace_method() is aliased to DDTrace\trace_method())' time='0.0151'>
+<testcase name='tmp/build_extension/tests/ext/span_on_close.phpt (Test onClose SpanData handler)' time='0.0155'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_handling.phpt (Exceptions get attached to spans)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_query_params_obfuscation_empty.phpt (Root span with http.url and unobfuscated query string with empty regex)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_function_alias.phpt (dd_trace_function() is aliased to DDTrace\trace_function())' time='0.0227'>
+<testcase name='tmp/build_extension/tests/ext/span_create_observer.phpt (Test observing span creation)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method_binds_called_object.phpt (DDTrace\trace_method() binds the called object to the tracing closure)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/root_span_url_with_post_fields.phpt (Post fields parameters should be retrieved and redacted if needed)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_methods.phpt (Keep spans in limited mode (userland methods))' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_05.phpt (Client IP should not be collected if ini dd_trace.client_ip_header_disabled is set to true)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_return.phpt (Functions that use return with yield are instrumented)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_multiple_write.phpt (Ensure caching does not bypass the span data write handler)' time='0.0171'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator.phpt (Functions that return generators are instrumented)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/extension_disabled.phpt (Sanity check when extension is disabled)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_with_exception.phpt (Exceptions are handled from a generator context)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/set_user_no_metadata.phpt (Test \DDTrace\set_user with no metadata)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_attach_exception.phpt (Auto-flushing will attach an exception during exception cleanup)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/do_not_check_if_class_or_function_exists_by_default.phpt (Do not throw exceptions when veryfying if class/method and function exists.)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/generator_in_object.phpt (Test tracing generators within objects)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_serialize_msgpack.phpt (Basic functionality of dd_trace_serialize_msgpack())' time='0.0285'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata_ge_php_84.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.013'>
-<skipped>: test only stable on PHP &gt;= 8.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/nested_exceptions.phpt (Nested exceptions are recorded (GH2498))' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/exception_does_not_close_span_that_catches.phpt (Exceptions do not close the span that catches it)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/crashtracker_segfault_disabled.phpt (Don&#039;t send crashtracker report when segmentation fault signal is raised and config disables it)' time='15.8497'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/auto_flush_disables_tracing.phpt (Auto-flushing will not instrument while flushing)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/ip_collection_01.phpt (Client IP should not be collected if DD_TRACE_CLIENT_IP_ENABLED/dd_trace.client_ip_enabled is not set)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/default_span_properties.phpt (Span properties defaults to values if not explicitly set (functions))' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/referrer_extraction_02.phpt (URL with special characters in host part)' time='0.0164'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/keep_spans_in_limited_tracing_userland_functions.phpt (Keep spans in limited mode (userland functions))' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/dd_trace_log_file.phpt (Using DD_TRACE_LOG_FILE)' time='0.0246'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/dd_trace_method.phpt (DDTrace\trace_method() can trace with internal spans)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/logging_default_value.phpt (Assess that the log integration is disabled by default)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/spans_out_of_sync_03.phpt (Gracefully handle out-of-sync spans from traced function [user])' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/extension_no_static_tls.phpt (Extension is not compiled with STATIC_TLS)' time='0.0294'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/safe_to_string_metadata.phpt (Span metadata is safely converted to strings without errors or exceptions)' time='0.0241'>
+<testcase name='tmp/build_extension/tests/ext/peer_service_wrong_values.phpt (Using a wrongly formatted DD_TRACE_PEER_SERVICE_MAPPING doesn&#039;t break the tracer)' time='0.0230'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.source_code.001" tests="1" failures="0" errors="0" skip="0" time="0.0342">
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/001/git_metadata_injection_from_valid_files.phpt (Basic Git Metadata Injection from valid .git files (Repository URL &amp; Commit Sha))' time='0.0342'>
+<testcase name='tmp/build_extension/tests/ext/sidecar_disabled_when_telemetry_disabled.phpt (Sidecar should be disabled when telemetry is disabled)' time='0.0455'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.install_hook" tests="31" failures="0" errors="0" skip="3" time="0.5404">
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_from_callable.phpt (Tracing Fake Closures via install_hook())' time='0.0175'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_callable.phpt (Tracing generic callables via install_hook())' time='0.0137'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_retval.phpt (Overriding function return value via install_hook())' time='0.0126'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_scoped_file.phpt (Test class scoped file inclusion hooking)' time='0.0126'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call_jit.phpt (suppressCall() works with JIT)' time='0.0304'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions via install_hook())' time='0.0297'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_internal_inherited_constructor.phpt (Test hooking inherited internal constructors via install_hook())' time='0.0119'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_file.phpt (Test file inclusion hooking)' time='0.0143'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args.phpt (Overriding function arguments via install_hook())' time='0.0121'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/suppress_call.phpt (Suppress function call via suppressCall())' time='0.0125'>
+<testsuite name="php.tmp.build_extension.tests.ext.sandbox.hook_method" tests="38" failures="0" errors="0" skip="0" time="0.5576">
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_02.phpt (DDTrace\hook_method posthook does not mess up spans with children)' time='0.0216'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_jit.phpt (generator hooking works with JIT)' time='0.0138'>
-<skipped>: JIT is only on PHP 8, and not stable enough on PHP 8.0</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_03.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0209'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure.phpt (Tracing Closures via install_hook())' time='0.0259'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_07.phpt (Nested closure targeting method call 02 (posthook))' time='0.0179'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/get_source_file.phpt (Retrieve the filename where the function/method originated from)' time='0.0114'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_access_01.phpt (hook_method prehook should have access only to public members)' time='0.0298'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_file.phpt (Test file inclusion hooking)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_01.phpt (DDTrace\hook_method posthook is called with an exception; args are still good)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.0143'>
-<skipped>: test only stable on PHP &gt;= 8.4</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_default_argument.phpt (Override arguments of a function with default arguments)' time='0.0115'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_executing_hook.phpt (Ensure proper interoperability with multiple observers installed on observer removal)' time='0.028'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_02.phpt (hook_method prehook is called with the correct scope (parent))' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/hook_not_invoked_if_tracer_disabled.phpt (Ensure hooks are not invoked after the tracer has been disabled)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_02.phpt (DDTrace\hook_method prehook error is sandboxed (debug))' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_exception.phpt (overrideException())' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/hook_extended_internal_class.phpt (Extended internal classes are hookable)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/internal_fake_closure_forced_parse_error_asan.phpt (ASAN repro: internal fake closure + forced eval parse error)' time='0.0258'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_01.phpt (DDTrace\hook_method prehook does not mess up span ids)' time='0.0160'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/exclude_inherited_hook.phpt (remove_hook() with class argument)' time='0.0179'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/01.phpt (DDTrace\hook_method supports both hooks simultaneously)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/remove_hook_null_logger.phpt (Remove hook)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_03.phpt (hook_method prehook is called with the correct scope (parent))' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/otel_void_post_hook_preserves_retval.phpt (OpenTelemetry hook polyfill: post hook with `: void` return type must not overwrite the function&#039;s return value)' time='0.0243'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_05.phpt (DDTrace\hook_method posthook is passed the correct retval)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/install_hook_return_by_ref.phpt (Test install_hook() on functions returning by reference)' time='0.025'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_span_ids_01.phpt (DDTrace\hook_method posthook does not mess up span ids)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_closure_ge_php_84.phpt (Tracing Closures via install_hook())' time='0.012'>
-<skipped>: test only stable on PHP &gt;= 8.4</skipped>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/02.phpt (DDTrace\hook_method returns false quietly when no hook is passed)' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_function.phpt (Tracing Functions via install_hook())' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_04.phpt (DDTrace\hook_method posthook is passed the correct args with inheritance)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_hook_args_internal.phpt (Adding additional function arguments on internal functions via install_hook())' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_03.phpt (DDTrace\hook_method posthook is passed the correct args)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/override_argument_jit.phpt (overrideArguments() works with JIT (Issue #2174))' time='0.0261'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_02.phpt (DDTrace\hook_method prehook is passed the correct args (variadic))' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/replace_generator.phpt (Replacing the return value of a generator instantiation in the begin hook)' time='0.0254'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_02.phpt (DDTrace\hook_method posthook error is sandboxed (debug))' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/allow_nested_hook.phpt (allowNestedHook())' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_01.phpt (hook_method posthook is called with the correct scope (no override))' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/install_hook/trace_generator.phpt (Tracing Closures via install_hook())' time='0.0255'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_scope_01.phpt (hook_method prehook is called with the correct scope (no override))' time='0.0141'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.http_streams" tests="4" failures="0" errors="0" skip="0" time="0.1166">
-<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams_with_headers_array.phpt (Distributed tracing headers propagate via file_get_contents() with pre-existing headers as array.)' time='0.0301'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exceptions_02.phpt (DDTrace\hook_method posthook exception is sandboxed)' time='0.0137'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams.phpt (Distributed tracing span is generated for file_get_contents())' time='0.0299'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_03.phpt (DDTrace\hook_method prehook is passed the correct args)' time='0.0143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams_disabled.phpt (Distributed tracing span is generated for file_get_contents())' time='0.0276'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_02.phpt (DDTrace\hook_method prehook exception is sandboxed (debug))' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/http_streams/distributed_tracing_http_streams_with_headers_string.phpt (Distributed tracing headers propagate via file_get_contents() with pre-existing headers as string.)' time='0.029'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_02.phpt (DDTrace\hook_method posthook is passed the correct args (variadic))' time='0.0131'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.curl" tests="26" failures="0" errors="0" skip="0" time="0.8057">
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_002.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt_array())' time='0.037'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_scope_02.phpt (hook_method posthook is called with the correct scope (parent))' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_004.phpt (Verify trace source tag is sent on asm event)' time='0.0304'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_exceptions_01.phpt (DDTrace\hook_method prehook exception is sandboxed)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_sampling_priority.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0283'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_01.phpt (DDTrace\hook_method posthook)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_disable.phpt (Distributed tracing headers do not propagate with curl_multi_exec() after dd_trace_disable_in_request())' time='0.0273'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_01.phpt (DDTrace\hook_method prehook)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/curl_release_on_shutdown.phpt (Curl multi objects release order does not crash on shutdown)' time='0.0241'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_02.phpt (DDTrace\hook_method posthook is called at exit (shutdown handler))' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0268'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/03.phpt (DDTrace\hook_method returns false with diagnostic when no hook is passed)' time='0.0165'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_copy_handle.phpt (Distributed tracing headers propagate after curl_copy_handle())' time='0.0297'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_002.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt_array())' time='0.0272'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_007.phpt (When ASM tracing is disabled and there is asm event, trace source tags is populated)' time='0.0276'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_exit_01.phpt (DDTrace\hook_method posthook is called at exit)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_001.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt())' time='0.0308'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_06.phpt (Nested closure targeting method call 01 (posthook))' time='0.0119'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_003.phpt (Distributed tracing headers propagate existing headers on error: curl_setopt_array())' time='0.0274'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_access_01.phpt (hook_method posthook should have access only to public members)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_invalid_tags.phpt (Distributed tracing headers contain properly escaped values)' time='0.0264'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_span_ids_02.phpt (DDTrace\hook_method prehook does not mess up spans with children)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_003.phpt (Test CurlMulti during garbage collection)' time='0.0417'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_05.phpt (A call to trace_method from hook_method prehook has non-static closure)' time='0.0235'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_tracestate.phpt (Distributed tracing headers propagate with curl_exec())' time='0.026'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_04.phpt (DDTrace\hook_method prehook is passed the correct args with inheritance)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_custom_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0292'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/prehook_error_01.phpt (DDTrace\hook_method prehook error is sandboxed)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_005.phpt (Verify trace source tag is not sent when no asm event)' time='0.0267'>
+<testcase name='tmp/build_extension/tests/ext/sandbox/hook_method/posthook_error_01.phpt (DDTrace\hook_method posthook error is sandboxed)' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_disabled_baggage.phpt (Baggage headers should not be propagated when curl integration is disabled)' time='0.0297'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.autoload.php.files" tests="10" failures="0" errors="0" skip="1" time="0.1515">
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/legacy_autoloader.phpt (Execute __autoload() if present)' time='0.0175'>
+<skipped>: __autoload was removed in PHP 8</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/curl_multi_exec_span_limit.phpt (curl_multi_exec parent spans honor DD_TRACE_SPANS_LIMIT (APMS-19944))' time='0.0823'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/default_spl_autoloader.phpt (Execute the default spl_autoload implementation if spl_autoload_register() is called without args)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_001.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt())' time='0.028'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/error_get_last_is_unaffected.phpt (Errors in ddtrace autoloader do not affect error_get_last())' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_asm_event.phpt (Distributed tracing header tags propagate asm events with curl_exec())' time='0.0352'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_registered_autoloader_match.phpt (Skip previously registered autoloader on match)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_002.phpt (Distributed tracing headers propagate when curl_multi_init() is called before curl_init())' time='0.0266'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_exceptions.phpt (Request init hook ignores exceptions)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_001.phpt (Distributed tracing headers propagate with curl_multi_exec())' time='0.0277'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_not_found.phpt (Do not fail when PHP code couldn&#039;t be loaded)' time='0.0146'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_006.phpt (When APM tracing is disabled, if not asm event, no tags are sent)' time='0.0303'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/dd_init_open_basedir.phpt (Calling dd_init.php is confined to open_basedir settings)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_drop_dm.phpt (Explicitly drop dd.p.dm if provided in propagated tags when the incoming sampling priority is reject)' time='0.0256'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_contains_non_printable_character.phpt (Request init hook loads files without using multibyte flag)' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_copy_handle.phpt (Distributed tracing headers propagate with curl_multi_exec() after curl_copy_handle())' time='0.0265'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_default_autoloader.phpt (Do not execute the default spl_autoload implementation if no autoloader is specified)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0272'>
+<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_fatal_errors.phpt (Request init hook ignores fatal errors)' time='0.0279'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.pcntl" tests="7" failures="0" errors="0" skip="0" time="1.1385">
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_reseed_span_id.phpt (Short running multiple forks)' time='0.1547'>
+<testsuite name="php.tmp.build_extension.tests.ext.priority_sampling" tests="29" failures="0" errors="0" skip="0" time="0.5014">
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/gh-1828.phpt (priority_sampling regression for GH-1828)' time='0.0207'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_autoflush.phpt (Long running autoflush)' time='0.0714'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/008-rule-service-reject.phpt (priority_sampling rule with service reject)' time='0.0545'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_thread_mode_orphan.phpt (Thread mode sidecar: orphaned child process promotes itself to master after parent exits)' time='0.5298'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/010-rule-name-service-reject.phpt (priority_sampling rule with name and service reject)' time='0.0267'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_multiple.phpt (Short running multiple forks)' time='0.0972'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/007-rule-service.phpt (priority_sampling rule with service match)' time='0.0262'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_nested.phpt (Short running nested forks)' time='0.1313'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/014-rule-resource.phpt (priority_sampling rule with resource match)' time='0.0271'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_manual.phpt (Long running manual flush)' time='0.0952'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/009-rule-name-service.phpt (priority_sampling rule with name and service match)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_single.phpt (Short running single fork)' time='0.0589'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/013-rule-service-mapped.phpt (priority_sampling service mapping)' time='0.0124'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.autoload.php.files" tests="10" failures="0" errors="0" skip="1" time="0.1398">
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_not_found.phpt (Do not fail when PHP code couldn&#039;t be loaded)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/001-default-sampling.phpt (priority_sampling default sampling)' time='0.0122'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/default_spl_autoloader.phpt (Execute the default spl_autoload implementation if spl_autoload_register() is called without args)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/006-rule-name-reject.phpt (priority_sampling rule with name reject)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/file_contains_non_printable_character.phpt (Request init hook loads files without using multibyte flag)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/020-rule-nonroot.phpt (priority_sampling rule with match on non-root spans)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/dd_init_open_basedir.phpt (Calling dd_init.php is confined to open_basedir settings)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/011-preset.phpt (priority_sampling preset decision retained)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_default_autoloader.phpt (Do not execute the default spl_autoload implementation if no autoloader is specified)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/018-manual.drop.phpt (priority_sampling with manual.drop)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/error_get_last_is_unaffected.phpt (Errors in ddtrace autoloader do not affect error_get_last())' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/asm-standalone.phpt (priority_sampling is ignored when asm standalone is enabled)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/skip_registered_autoloader_match.phpt (Skip previously registered autoloader on match)' time='0.0145'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/015-rule-resource-reject.phpt (priority_sampling rule with resource reject)' time='0.0261'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/legacy_autoloader.phpt (Execute __autoload() if present)' time='0.0142'>
-<skipped>: __autoload was removed in PHP 8</skipped>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/021-rule-name-as-glob-with-question-mark.phpt (priority_sampling rule with name match, using glob)' time='0.0160'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_exceptions.phpt (Request init hook ignores exceptions)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-regex-rule.phpt (Invalid regex: default sampling rate applies)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/autoload-php-files/ignores_fatal_errors.phpt (Request init hook ignores fatal errors)' time='0.0244'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/023-manual.keep-distributed_overwrite.phpt (manual.keep will overwrite a rejected distributed sampling decision)' time='0.0138'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.inferred_proxy" tests="12" failures="0" errors="0" skip="0" time="0.1603">
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/alter_service.phpt (Inferred span&#039;s service shouldn&#039;t change on ini_change of datadog.service)' time='0.0144'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/019-manual.keep.phpt (priority_sampling with manual.keep)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/sampling_rules.phpt (Priority sampling rules should use the inferred span&#039;s service &amp; resource)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/invalid-json-rule.phpt (Invalid rule json: default sampling rate applies)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/basic_test.phpt (Should create parent and child spans for a 200)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/004-rule-basic.phpt (priority_sampling basic rule)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/consume_distributed_tracing_headers.phpt (API Gateway span should be created from consuming distributed tracing headers)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/002-user-reject.phpt (priority_sampling user reject)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_after_span_start.phpt (Span creation with distributed context set after starting span)' time='0.0154'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/012-default.phpt (priority_sampling default decision retained)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/security_headers_forwarded.phpt (Security-testing headers are forwarded to the inferred proxy span)' time='0.0143'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/024-deterministic-sampling.phpt (run sampling algorithm on multiple trace IDs and ensure that the results are deterministic)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/distributed_tracing.phpt (Span creation with distributed context)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/005-rule-name.phpt (priority_sampling rule with name match)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/incomplete_headers.phpt (An Inferred Span should not be created on missing headers)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/manual_global_override.phpt (Global explicitly set priority sampling must be respected)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/error_propagated.phpt (Should create parent and child spans for error)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/017-rule-tag-reject.phpt (priority_sampling rule with tag reject)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/fallback_service_name.phpt (The AWS API Gateway proxy service name should fallback to global config)' time='0.0136'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/016-rule-tag.phpt (priority_sampling rule with tag match)' time='0.0270'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/multiple_traces.phpt (API Gateway span should only be created once)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/003-user-keep.phpt (priority_sampling user keep)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_before_span_start.phpt (Span creation with distributed context set before starting span)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/priority_sampling/022-rule-name-as-glob-with-multiple-criterias.phpt (priority_sampling rule with name match, using glob)' time='0.0155'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.wrong.parameter.errors" tests="7" failures="0" errors="0" skip="0" time="0.087">
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_function.phpt (DDTrace_hook_function is passed wrong parameters)' time='0.0122'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_function.phpt (DDTrace_trace_function is passed wrong parameters)' time='0.0122'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/dd_trace_send_traces_via_thread.phpt (dd_trace_send_traces_via_thread is passed wrong parameters)' time='0.0128'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_method.phpt (DDTrace_trace_method is passed wrong parameters)' time='0.014'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/set_distributed_tracing_context.phpt (DDTrace_set_distributed_tracing_context is passed wrong parameters)' time='0.0119'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_method.phpt (DDTrace_hook_method is passed wrong parameters)' time='0.0115'>
+<testsuite name="php.tmp.build_extension.tests.ext.background.sender" tests="17" failures="6" errors="0" skip="4" time="109.3316">
+<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_survives_setuid.phpt (background sender survives setuid)' time='0.0375'>
+<skipped>: background-sender only test</skipped>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_restores_capabilities.phpt (background sender restores effective capabilities from permitted set)' time='0.0192'>
+<skipped>: background-sender only test</skipped>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id.phpt (The container ID is sent via HTTP headers to the Agent)' time='5.1060'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_unix_domain_socket.phpt (HTTP headers are sent to the Agent from the background sender over an unix domain socket)' time='5.3772'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_ignore_userland.phpt (HTTP Agent headers are ignored from userland)' time='0.0139'>
+<skipped>: background-sender only test</skipped>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.phpt (Sample rate is not changed to 0 after first call during a minute when STANDALONE ASM is enabled and there is asm events)' time='12.2865'>
+<failure type='FAILED' message=''>     First call it is used as heartbeat: 1
+002- This call has the same sample rate: 2
+003- This call also has the same sample rate: 2
+002+ 
+003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+004+ Stack trace:
+005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.php(7): RequestReplayer-&gt;waitForDataAndReplay()
+006+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.php(21): {closure}()
+007+ #2 {main}
+008+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.phpt (Sample rate is not changed to 0 after first call during a minute when there is appsec upstream)' time='12.1675'>
+<failure type='FAILED' message=''>001- First call it is used as heartbeat: 3
+002- This call has the same sample rate: 3
+003- This call also has the same sample rate: 3
+001+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+002+ Stack trace:
+003+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.php(7): RequestReplayer-&gt;waitForDataAndReplay()
+004+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.php(14): {closure}()
+005+ #2 {main}
+006+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling_sidecar.phpt (The sidecar trace flusher sender informs about changes to the agent sample rate)' time='9.3119'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling.phpt (The background sender informs about changes to the agent sample rate)' time='12.2197'>
+<failure type='FAILED' message=''>     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
+     Initial sampling: 1
+     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
+004- Generic sampling: 0
+005- [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
+006- Specific sampling: 1
+004+ 
+005+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+006+ Stack trace:
+007+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling.php(7): RequestReplayer-&gt;waitForDataAndReplay()
+008+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling.php(25): {closure}()
+009+ #2 {main}
+010+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+     [ddtrace] [info] No finished traces to be sent to the agent
+</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_handles_invalid_agent_url.phpt (The sidecar properly handles invalid agent urls)' time='0.0256'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/default_unix_domain_socket_agent.phpt (If an agent unix domain socket exists it will try to connect to it)' time='0.0135'>
+<skipped>: no permissions to create a /var/run/datadog/apm.socket</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_id.phpt (DDTrace_trace_id is passed wrong parameters)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_ipv6_support.phpt (DD_AGENT_HOST with IPv6 works)' time='0.0424'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_fallback.phpt (Send telemetry about the sidecar being disabled)' time='10.0777'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers.phpt (HTTP headers are sent to the Agent from the background sender)' time='5.1008'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_empty.phpt (An empty container ID is not sent via HTTP headers to the Agent)' time='12.3537'>
+<failure type='FAILED' message=''>     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
+     
+003- datadog-meta-lang: php
+     
+005- Done.
+004+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+005+ Stack trace:
+006+ #0 /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc(107): RequestReplayer-&gt;waitForDataAndReplay()
+007+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_empty.php(10): RequestReplayer-&gt;replayHeaders(Array)
+008+ #2 {main}
+009+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+     [ddtrace] [info] No finished traces to be sent to the agent
+</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_01.phpt (Sample rate is changed to 0 after first call during a minute when STANDALONE ASM is enabled and no asm events)' time='12.7113'>
+<failure type='FAILED' message=''>001- All good
+002- Done
+001+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+002+ Stack trace:
+003+ #0 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_01.php(13): RequestReplayer-&gt;waitForDataAndReplay()
+004+ #1 {main}
+005+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_fargate.phpt (The Fargate 1.4+ container ID is sent via HTTP headers to the Agent)' time='12.4672'>
+<failure type='FAILED' message=''>     [ddtrace] [info] Flushing trace of size 1 to send-queue for http://request-replayer:80
+     
+003- datadog-container-id:%s34dc0b5e626f2c5c4c5170e34b10e765-1234567890
+004- datadog-meta-lang: php
+005- 
+006- Done.
+003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+004+ Stack trace:
+005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc(107): RequestReplayer-&gt;waitForDataAndReplay()
+006+ #1 /home/circleci/app/tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_fargate.php(9): RequestReplayer-&gt;replayHeaders()
+007+ #2 {main}
+008+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+     [ddtrace] [info] No finished traces to be sent to the agent
+</failure>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.sandbox.hook_function" tests="32" failures="0" errors="0" skip="0" time="0.4462">
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/01.phpt (DDTrace\hook_function supports both hooks simultaneously)' time='0.0119'>
+<testsuite name="php.tmp.build_extension.tests.ext.distributed_tracing" tests="24" failures="0" errors="0" skip="0" time="0.34">
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_02.phpt (Sampling priority is kept from distributed when asm upstream and asm standalone enabled)' time='0.0268'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/recursion.phpt (DDTrace\hook_function supports recursion)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_04.phpt (Invalid _dd.p.ts - More bits than allowed)' time='0.0164'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_02.phpt (DDTrace\hook_function prehook is passed the correct args (variadic))' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite.phpt (Setting custom distributed header information)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_02.phpt (DDTrace\hook_function posthook error is sandboxed (debug))' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_bogus_ids.phpt (Transmit distributed header information to spans)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_03.phpt (DDTrace\hook_function posthook exception is sandboxed (internal))' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_03.phpt (Invalid _dd.p.ts - Non hexadecimal)' time='0.0120'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_01.phpt (DDTrace\hook_function posthook is called with an exception; args are still good)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite_active_span.phpt (Setting a distributed tracing context if a span is already active)' time='0.0258'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_01.phpt (DDTrace\hook_function posthook basic functionality)' time='0.0127'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_generate.phpt (Test generate_distributed_tracing_headers())' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_03.phpt (DDTrace\hook_function prehook exception is sandboxed (internal))' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3.phpt (Transmit distributed header information to spans via B3 headers)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/02.phpt (DDTrace\hook_function returns false quietly when no hook is passed)' time='0.0112'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers.phpt (Setting custom distributed header information)' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_01.phpt (DDTrace\hook_function posthook is called at exit)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_09.phpt (_dd.p.ts is not manipulated when no asm event)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_variadic.phpt (DDTrace\hook_function posthook works with variadic functions)' time='0.0149'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_dd_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in datadog and tracecontext headers)' time='0.0124'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_variadic.phpt (DDTrace\hook_function prehook works with variadic functions)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span_no_sampling.phpt (Transmit distributed header information to spans via single B3 header without sampling decision)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_02.phpt (DDTrace\hook_function prehook error is sandboxed (debug))' time='0.0133'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_04.phpt (DDTrace\hook_function prehook exception is sandboxed (debug internal))' time='0.0136'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_03.phpt (DDTrace\hook_function posthook is passed the correct args)' time='0.0123'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_error_01.phpt (DDTrace\hook_function prehook error is sandboxed)' time='0.0232'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_03.phpt (DDTrace\hook_function prehook is passed the correct args)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_06.phpt (Test ts is only added to traces with ASM events)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_02.phpt (DDTrace\hook_function posthook exception is sandboxed)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span.phpt (Transmit distributed header information to spans via single B3 header)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exceptions_04.phpt (DDTrace\hook_function posthook exception is sandboxed (debug internal))' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in tracestate and traceparent headers)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0141'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_func.phpt (Test consume_distributed_tracing_headers() with function argument)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_02.phpt (DDTrace\hook_function posthook is passed the correct args (variadic))' time='0.0159'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_07.phpt (Test two traces get trace source from tags)' time='0.0117'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_access_01.phpt (hook_function posthook should have access only to public members)' time='0.0137'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_08.phpt (For now, even when trace was generated by APM the produced output on standalone is 02 on _dd.p.ts)' time='0.0118'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_01.phpt (DDTrace\hook_function prehook exception is sandboxed)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_array.phpt (Test consume_distributed_tracing_headers() with array argument)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_does_not_leak_error.phpt (Check that sandboxed hooks do not invoke error handlers or set the error code)' time='0.0249'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_reset_context_on_init.phpt (Reset distributed tracing context on request init)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_exit_02.phpt (DDTrace\hook_function posthook is called at exit (shutdown handler))' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_01.phpt (Sampling priority is changed to user keep if no asm upstream and asm standalone enabled. Also apm disabled tag is added)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_01.phpt (DDTrace\hook_function prehook basic functionality)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_05.phpt (Invalid _dd.p.ts - It requires at least 2 bits instead of 1)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/dropping_trace_hook.phpt (Test dropping spans from multiple trace hooks)' time='0.0171'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers_invalid_tags.phpt (Setting custom distributed header information with invalid propagated tags)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/hook_internal_fake_closure.phpt (Test hooking fake closures of internal functions)' time='0.0238'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/03.phpt (DDTrace\hook_function returns false with diagnostic when no hook is passed)' time='0.0118'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_error_01.phpt (DDTrace\hook_function posthook error is sandboxed)' time='0.0124'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/prehook_exceptions_02.phpt (DDTrace\hook_function prehook exception is sandboxed (debug))' time='0.0118'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/sandbox/hook_function/posthook_limited_01.phpt (hook_function posthook should ignore limited mode)' time='0.0133'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit.phpt (Transmit distributed header information to spans)' time='0.0130'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.distributed_tracing" tests="33" failures="0" errors="0" skip="0" time="0.421">
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_func.phpt (Test consume_distributed_tracing_headers() with function argument)' time='0.0131'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_01.phpt (Sampling priority is changed to user keep if no asm upstream and asm standalone enabled. Also apm disabled tag is added)' time='0.0122'>
+<testsuite name="php.tmp.build_extension.tests.ext.wrong.parameter.errors" tests="7" failures="0" errors="0" skip="0" time="0.1033">
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_method.phpt (DDTrace_trace_method is passed wrong parameters)' time='0.0222'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_bogus_ids.phpt (Transmit distributed header information to spans)' time='0.0156'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/set_distributed_tracing_context.phpt (DDTrace_set_distributed_tracing_context is passed wrong parameters)' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_uppercase_restart.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: RESTART (uppercase) is accepted)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_function.phpt (DDTrace_trace_function is passed wrong parameters)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_ignore.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=ignore drops all incoming context including baggage)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_method.phpt (DDTrace_hook_method is passed wrong parameters)' time='0.0134'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit.phpt (Transmit distributed header information to spans)' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_trace_id.phpt (DDTrace_trace_id is passed wrong parameters)' time='0.0136'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_reset_context_on_init.phpt (Reset distributed tracing context on request init)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/dd_trace_send_traces_via_thread.phpt (dd_trace_send_traces_via_thread is passed wrong parameters)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_restart_explicit_root.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=restart attaches span link when the root is opened via DDTrace\start_trace_span())' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/wrong-parameter-errors/DDTrace_hook_function.phpt (DDTrace_hook_function is passed wrong parameters)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_09.phpt (_dd.p.ts is not manipulated when no asm event)' time='0.0125'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.integrations.curl" tests="25" failures="0" errors="0" skip="0" time="35.7852">
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/curl_release_on_shutdown.phpt (Curl multi objects release order does not crash on shutdown)' time='0.0433'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_08.phpt (For now, even when trace was generated by APM the produced output on standalone is 02 on _dd.p.ts)' time='0.012'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_002.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt_array())' time='0.0379'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_generate.phpt (Test generate_distributed_tracing_headers())' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_asm_event.phpt (Distributed tracing header tags propagate asm events with curl_exec())' time='0.0398'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_02.phpt (Sampling priority is kept from distributed when asm upstream and asm standalone enabled)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_drop_dm.phpt (Explicitly drop dd.p.dm if provided in propagated tags when the incoming sampling priority is reject)' time='0.0189'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3.phpt (Transmit distributed header information to spans via B3 headers)' time='0.014'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_sampling_priority.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0313'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_03.phpt (Invalid _dd.p.ts - Non hexadecimal)' time='0.0145'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_tracestate.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0147'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_04.phpt (Invalid _dd.p.ts - More bits than allowed)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_custom_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0332'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span_no_sampling.phpt (Transmit distributed header information to spans via single B3 header without sampling decision)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_copy_handle.phpt (Distributed tracing headers propagate with curl_multi_exec() after curl_copy_handle())' time='5.0231'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_mixedcase_ignore.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: Ignore (mixed case) is accepted)' time='0.0139'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_003.phpt (Distributed tracing headers propagate existing headers on error: curl_setopt_array())' time='0.0312'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_restart.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=restart starts fresh trace with span link)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_007.phpt (When ASM tracing is disabled and there is asm event, trace source tags is populated)' time='0.0146'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in tracestate and traceparent headers)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_invalid_tags.phpt (Distributed tracing headers contain properly escaped values)' time='0.0293'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_continue.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT=continue inherits upstream context)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_copy_handle.phpt (Distributed tracing headers propagate after curl_copy_handle())' time='0.0312'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers_long_origin.phpt (SpanLink::fromHeaders handles long propagated origins)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_006.phpt (When APM tracing is disabled, if not asm event, no tags are sent)' time='5.1205'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers.phpt (Setting custom distributed header information)' time='0.015'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_001.phpt (Distributed tracing headers propagate with existing headers set with curl_setopt())' time='0.0318'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_conflicting_span_ids_dd_tracecontext.phpt (Test consume_distributed_tracing_headers() with conflicting span_ids in datadog and tracecontext headers)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_002.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt_array())' time='5.0331'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite.phpt (Setting custom distributed header information)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_existing_headers_001.phpt (Distributed tracing headers propagate with curl_multi_exec() and headers set with curl_setopt())' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_consume_array.phpt (Test consume_distributed_tracing_headers() with array argument)' time='0.0126'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_005.phpt (Verify trace source tag is not sent when no asm event)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_07.phpt (Test two traces get trace source from tags)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_propagate_tags.phpt (Distributed tracing header tags propagate with curl_exec())' time='0.0145'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_invalid_fallback.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: invalid value falls back to continue)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_disabled_baggage.phpt (Baggage headers should not be propagated when curl integration is disabled)' time='0.0269'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_06.phpt (Test ts is only added to traces with ASM events)' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl.phpt (Distributed tracing headers propagate with curl_exec())' time='0.0298'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_overwrite_active_span.phpt (Setting a distributed tracing context if a span is already active)' time='0.0142'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_existing_headers_004.phpt (Verify trace source tag is sent on asm event)' time='0.0276'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/propagation_behavior_extract_config_uppercase_continue.phpt (DD_TRACE_PROPAGATION_BEHAVIOR_EXTRACT: CONTINUE (uppercase) is accepted)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_disable.phpt (Distributed tracing headers do not propagate with curl_multi_exec() after dd_trace_disable_in_request())' time='5.0455'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_inherit_b3-single-span.phpt (Transmit distributed header information to spans via single B3 header)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_003.phpt (Test CurlMulti during garbage collection)' time='5.0294'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_span_link_from_headers_invalid_tags.phpt (Setting custom distributed header information with invalid propagated tags)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_002.phpt (Distributed tracing headers propagate when curl_multi_init() is called before curl_init())' time='5.0192'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/distributed_trace_asm_standalone_05.phpt (Invalid _dd.p.ts - It requires at least 2 bits instead of 1)' time='0.0119'>
+<testcase name='tmp/build_extension/tests/ext/integrations/curl/distributed_tracing_curl_multi_exec_001.phpt (Distributed tracing headers propagate with curl_multi_exec())' time='5.0291'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.error_status_configuration" tests="2" failures="0" errors="0" skip="0" time="0.0246">
-<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_client_configuration.phpt (HTTP client status code error configuration and helper functions)' time='0.0123'>
+<testsuite name="php.tmp.build_extension.tests.ext.inferred_proxy" tests="11" failures="0" errors="0" skip="0" time="0.1746">
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/alter_service.phpt (Inferred span&#039;s service shouldn&#039;t change on ini_change of datadog.service)' time='0.0165'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_parsing.phpt (HTTP server error status configuration parsing test)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/distributed_tracing.phpt (Span creation with distributed context)' time='0.0248'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.request.replayer" tests="7" failures="1" errors="0" skip="0" time="2.805">
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_exception_span_event.phpt (DDTrace\ExceptionSpanEvent serialization with overridden attributes)' time='0.3672'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/basic_test.phpt (Should create parent and child spans for a 200)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/client_side_stats.phpt (Client-side SHM span stats are computed and flushed to the agent on trace flush)' time='0.4127'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/incomplete_headers.phpt (An Inferred Span should not be created on missing headers)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_agent_env.phpt (Assert that the default environment can be read from agent info)' time='0.0385'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_before_span_start.phpt (Span creation with distributed context set before starting span)' time='0.0142'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/client_side_stats_peer_tags.phpt (Client-side SHM span stats include peer tags configured via agent info)' time='1.1138'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/propagated_tags_after_span_start.phpt (Span creation with distributed context set after starting span)' time='0.0148'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_event.phpt (DDTrace\SpanEvent serialization with attributes)' time='0.37'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/error_propagated.phpt (Should create parent and child spans for error)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_link_with_exception.phpt (Span Link serialization with non-null EG(exception) doesn&#039;t fail)' time='0.3674'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/consume_distributed_tracing_headers.phpt (API Gateway span should be created from consuming distributed tracing headers)' time='0.0135'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/request-replayer/client_side_stats_trace_filters.phpt (Client-side stats respect trace filters (filter_tags, filter_tags_regex, ignore_resources) from agent info)' time='0.1354'>
-<failure type='FAILED' message=''>001- in traces: op.pass
-     in stats: op.pass</failure>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/sampling_rules.phpt (Priority sampling rules should use the inferred span&#039;s service &amp; resource)' time='0.0135'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.limiter" tests="3" failures="0" errors="0" skip="0" time="0.061">
-<testcase name='tmp/build_extension/tests/ext/limiter/001-limiter-disabled.phpt (rate limiter disabled)' time='0.0115'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/fallback_service_name.phpt (The AWS API Gateway proxy service name should fallback to global config)' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/limiter/002-limiter-reached.phpt (rate limiter reached)' time='0.0245'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/limiter/003-limiter-with-asm-standalone.phpt (rate limiter always allow when DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED enabled)' time='0.025'>
+<testcase name='tmp/build_extension/tests/ext/inferred_proxy/multiple_traces.phpt (API Gateway span should only be created once)' time='0.0226'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.profiling" tests="2" failures="0" errors="0" skip="2" time="0.024">
-<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_01.phpt (runtime-id exists in meta when profiling is enabled)' time='0.0125'>
-<skipped>: requires profiling</skipped>
+<testsuite name="php.tmp.build_extension.tests.ext.error_status_configuration" tests="2" failures="0" errors="0" skip="0" time="0.0292">
+<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_client_configuration.phpt (HTTP client status code error configuration and helper functions)' time='0.0158'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_02.phpt (runtime-id exists in meta when profiling is disabled)' time='0.0115'>
-<skipped>: requires profiling</skipped>
+<testcase name='tmp/build_extension/tests/ext/error_status_configuration/http_error_status_parsing.phpt (HTTP server error status configuration parsing test)' time='0.0134'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.remote_config" tests="6" failures="0" errors="0" skip="0" time="0.8927">
-<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_multiconfig.phpt (Test dynamic config multiconfig priority merging)' time='0.2342'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/remote_config/rc_process_tags.phpt (Test remote config request payload)' time='0.1274'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/remote_config/rc_trace_enabled_rinit.phpt (RC tracing_enabled=true during RINIT does not double-init request globals)' time='0.1439'>
+<testsuite name="php.tmp.build_extension.tests.ext.fibers" tests="4" failures="0" errors="0" skip="0" time="0.1108">
+<testcase name='tmp/build_extension/tests/ext/fibers/fiber_observer_bailout.phpt (Test fiber observing with bailout)' time='0.0285'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_update.phpt (Test dynamic config update)' time='0.0267'>
+<testcase name='tmp/build_extension/tests/ext/fibers/fiber_stack_switch.phpt (Test fiber observing)' time='0.0269'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/remote_config/rc_fork_notify.phpt (RC notifications must appear in forked processes)' time='0.1317'>
+<testcase name='tmp/build_extension/tests/ext/fibers/enable_tracer_in_fiber.phpt (Ensure the tracer can also be enabled or disabled in fibers)' time='0.0294'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_auto_update.phpt (Test dynamic config update)' time='0.2288'>
+<testcase name='tmp/build_extension/tests/ext/fibers/fiber_switch_tracer_disabled.phpt (Test executing fibers with tracer fully disabled)' time='0.0260'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.dogstatsd" tests="5" failures="0" errors="0" skip="0" time="0.1363">
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_udp_unreachable.phpt (DogStatsD client crash reproduction with unreachable UDP socket)' time='0.0138'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/disabled_if_agentless.phpt (DogStatsD is disabled in agentlessmode)' time='0.0475'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_uds.phpt (Send DogStatsD metrics over an Unix Domain Socket)' time='0.0324'>
+<testsuite name="php.tmp.build_extension.tests.ext.dogstatsd" tests="3" failures="0" errors="0" skip="0" time="0.1813">
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_uds.phpt (Send DogStatsD metrics over an Unix Domain Socket)' time='0.0352'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_udp.phpt (Send DogStatsD metrics over a UDP socket)' time='0.0305'>
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_udp.phpt (Send DogStatsD metrics over a UDP socket)' time='0.0303'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/dogstatsd/metrics_over_uds_unreachable.phpt (DogStatsD client crash reproduction with unreachable Unix socket)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/dogstatsd/disabled_if_agentless.phpt (DogStatsD is disabled in agentlessmode)' time='0.1158'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.fibers" tests="4" failures="0" errors="0" skip="4" time="0.0518">
-<testcase name='tmp/build_extension/tests/ext/fibers/fiber_switch_tracer_disabled.phpt (Test executing fibers with tracer fully disabled)' time='0.0139'>
-<skipped>: Fibers are a PHP 8.1+ feature</skipped>
+<testsuite name="php.tmp.build_extension.tests.ext.single.span_sampling" tests="6" failures="0" errors="0" skip="0" time="0.4722">
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span-with-match.phpt (Test max_per_second single span limiting with multiple buckets)' time='0.0310'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/fibers/enable_tracer_in_fiber.phpt (Ensure the tracer can also be enabled or disabled in fibers)' time='0.0127'>
-<skipped>: Fibers are a PHP 8.1+ feature</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/fibers/fiber_observer_bailout.phpt (Test fiber observing with bailout)' time='0.0124'>
-<skipped>: Fibers are a PHP 8.1+ feature</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/fibers/fiber_stack_switch.phpt (Test fiber observing)' time='0.0128'>
-<skipped>: Fibers are a PHP 8.1+ feature</skipped>
-</testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.source_code" tests="5" failures="0" errors="0" skip="0" time="0.0672">
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/repository_url_env_var.phpt (When DD_GIT_REPOSITORY_URL is specified, _dd.git.repository_url is injected)' time='0.0161'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/check-sample-rate.phpt (Check sample rate is in effect)' time='0.3779'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/commit_sha_env_var.phpt (When DD_GIT_COMMIT_SHA is specified, _dd.git_commit_sha is injected)' time='0.0124'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/accept-single-span.phpt (Ingest all spans)' time='0.0129'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_remove_credentials_from_env.phpt (Remove credentials from repository URL)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/name-matching-single-span.phpt (Ingest all spans)' time='0.0126'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_env.phpt (Basic Git Metadata Injection from env var (Repository URL &amp; Commit Sha))' time='0.0122'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/read-single-span-sampling-config-from-file.phpt (Check sample rate is in effect)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_global_tags.phpt (Basic Git Metadata Injection from global tags (Repository URL &amp; Commit Sha))' time='0.0131'>
+<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span.phpt (Test max_per_second single span limiting)' time='0.0247'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.background.sender" tests="18" failures="0" errors="0" skip="1" time="8.3264">
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_01.phpt (Sample rate is changed to 0 after first call during a minute when STANDALONE ASM is enabled and no asm events)' time='0.1295'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_ignore_userland.phpt (HTTP Agent headers are ignored from userland)' time='0.3701'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_thread_mode_permissions.phpt (Thread mode sidecar uses abstract Unix socket)' time='0.2251'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_survives_setuid.phpt (background sender survives setuid)' time='0.0455'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_ipv6_support.phpt (DD_AGENT_HOST with IPv6 works)' time='0.0386'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id.phpt (The container ID is sent via HTTP headers to the Agent)' time='0.7052'>
+<testsuite name="php.tmp.build_extension.tests.ext.integrations.source_code" tests="5" failures="0" errors="0" skip="0" time="0.0666">
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_remove_credentials_from_env.phpt (Remove credentials from repository URL)' time='0.0151'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_unix_domain_socket.phpt (HTTP headers are sent to the Agent from the background sender over an unix domain socket)' time='0.0704'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/repository_url_env_var.phpt (When DD_GIT_REPOSITORY_URL is specified, _dd.git.repository_url is injected)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/default_unix_domain_socket_agent.phpt (If an agent unix domain socket exists it will try to connect to it)' time='0.0117'>
-<skipped>: no permissions to create a /var/run/datadog/apm.socket</skipped>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_empty.phpt (An empty container ID is not sent via HTTP headers to the Agent)' time='0.3709'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/cli_shutdown_no_hang_unreachable_agent.phpt (CLI shutdown does not hang when agent is unreachable)' time='2.0266'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/commit_sha_env_var.phpt (When DD_GIT_COMMIT_SHA is specified, _dd.git_commit_sha is injected)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_03.phpt (Sample rate is not changed to 0 after first call during a minute when there is appsec upstream)' time='0.1324'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_env.phpt (Basic Git Metadata Injection from env var (Repository URL &amp; Commit Sha))' time='0.0132'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling-standalone-asm_02.phpt (Sample rate is not changed to 0 after first call during a minute when STANDALONE ASM is enabled and there is asm events)' time='0.1292'>
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/git_metadata_injection_from_global_tags.phpt (Basic Git Metadata Injection from global tags (Repository URL &amp; Commit Sha))' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/background_sender_restores_capabilities.phpt (background sender restores effective capabilities from permitted set)' time='0.0514'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.pcntl" tests="6" failures="0" errors="0" skip="0" time="0.6094">
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_autoflush.phpt (Long running autoflush)' time='0.0966'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/sidecar_handles_invalid_agent_url.phpt (The sidecar properly handles invalid agent urls)' time='0.0215'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_nested.phpt (Short running nested forks)' time='0.1254'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers_container_id_fargate.phpt (The Fargate 1.4+ container ID is sent via HTTP headers to the Agent)' time='0.3648'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_multiple.phpt (Short running multiple forks)' time='0.1061'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_headers.phpt (HTTP headers are sent to the Agent from the background sender)' time='0.6983'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_long_running_manual.phpt (Long running manual flush)' time='0.0960'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling.phpt (The background sender informs about changes to the agent sample rate)' time='1.0626'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_reseed_span_id.phpt (Short running multiple forks)' time='0.1226'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/background-sender/agent_sampling_sidecar.phpt (The sidecar trace flusher sender informs about changes to the agent sample rate)' time='1.8726'>
+<testcase name='tmp/build_extension/tests/ext/pcntl/pcntl_fork_short_running_single.phpt (Short running single fork)' time='0.0627'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.distributed_tracing.baggage" tests="11" failures="0" errors="0" skip="0" time="0.138">
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_default.phpt (Test baggage header interaction with default configurations)' time='0.0124'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_alone.phpt (Test baggage header behavior when configured by itself)' time='0.0121'>
+<testsuite name="php.tmp.build_extension.tests.ext.limiter" tests="3" failures="0" errors="0" skip="0" time="0.0706">
+<testcase name='tmp/build_extension/tests/ext/limiter/003-limiter-with-asm-standalone.phpt (rate limiter always allow when DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED enabled)' time='0.0304'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_wildcard.phpt (Test baggage span tags wildcard)' time='0.015'>
+<testcase name='tmp/build_extension/tests/ext/limiter/002-limiter-reached.phpt (rate limiter reached)' time='0.0262'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_keys.phpt (Test baggage span tags specifying keys)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/limiter/001-limiter-disabled.phpt (rate limiter disabled)' time='0.0140'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_empty.phpt (Test baggage span tags empty config)' time='0.0125'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_context_propagated.phpt (Test baggage round-trip propagation and multiple header handling)' time='0.0118'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags.phpt (Test baggage span tags default behavior)' time='0.0131'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.span_stack" tests="9" failures="0" errors="0" skip="0" time="0.1402">
+<testcase name='tmp/build_extension/tests/ext/span_stack/stack_dropped_parent.phpt (Span stacks are fully reset when the tracer is disabled and re-enabled)' time='0.0149'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_decoding_encoding.phpt (Test baggage header behavior with encoding and decoding)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_swap.phpt (Test creating swapping traces)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_first.phpt (Test baggage header interaction when is configured as first)' time='0.0118'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_new_trace.phpt (Test creating a new trace)' time='0.0133'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_bytes.phpt (Test baggage header interaction with bytes limits configured)' time='0.0123'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap.phpt (Test creating a switching span stacks)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_items.phpt (Test baggage header interaction with items limit configured)' time='0.013'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_stack_autoclose.phpt (Test autoclosing of spans on abandoned span stacks)' time='0.0266'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.call_user_func" tests="4" failures="0" errors="0" skip="0" time="0.0673">
-<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced.phpt (Test that call_user_func can trace inside a namespace)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/start_top_level_span_stack.phpt (Test creating a new span stack on top level)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced-array.phpt (Test that call_user_func_array can trace inside a namespace)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_clone.phpt (Test cloning a span stack)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced.phpt (Test that call_user_func can trace in global scope)' time='0.018'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap_traced_function.phpt (Test swapping span stacks due to auto-close of spans by functions)' time='0.0121'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced-array.phpt (Test that call_user_func_array can trace in global scope)' time='0.0239'>
+<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_stack.phpt (Test creating a new span stack)' time='0.0221'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.single.span_sampling" tests="6" failures="0" errors="0" skip="0" time="0.4714">
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span.phpt (Test max_per_second single span limiting)' time='0.0277'>
+<testsuite name="php.tmp.build_extension.tests.ext.library_config" tests="6" failures="0" errors="0" skip="0" time="20.5986">
+<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_env.phpt (Check that the library config files overloads env vars)' time='0.0261'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/read-single-span-sampling-config-from-file.phpt (Check sample rate is in effect)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_ini.phpt (Check that the library config files overloads ini settings)' time='0.0257'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/limited-single-span-with-match.phpt (Test max_per_second single span limiting with multiple buckets)' time='0.0288'>
+<testcase name='tmp/build_extension/tests/ext/library_config/local_config_does_not_overload_env.phpt (Check the library config files)' time='0.0264'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/check-sample-rate.phpt (Check sample rate is in effect)' time='0.3779'>
+<testcase name='tmp/build_extension/tests/ext/library_config/local_config_overloads_ini.phpt (Check the library config files)' time='0.0305'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/accept-single-span.phpt (Ingest all spans)' time='0.0117'>
+<testcase name='tmp/build_extension/tests/ext/library_config/local_config.phpt (Check the library config files)' time='10.2420'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/single-span_sampling/name-matching-single-span.phpt (Ingest all spans)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config.phpt (Check the library config files)' time='10.2479'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.telemetry" tests="14" failures="0" errors="0" skip="0" time="132.2185">
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration.phpt (Signal integration telemetry)' time='10.1705'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_03.phpt (Filesystem integration depends on RASP. If RASP is enabled and wrapped function are used, then it is enabled)' time='10.1644'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_04.phpt (Filesystem integration can also be disabled with default integrations flag)' time='10.073'>
+<testsuite name="php.tmp.build_extension.tests.ext.distributed_tracing.baggage" tests="11" failures="0" errors="0" skip="0" time="0.1413">
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_bytes.phpt (Test baggage header interaction with bytes limits configured)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/disabled.phpt (Disabled telemetry test)' time='0.125'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_alone.phpt (Test baggage header behavior when configured by itself)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/composer.phpt (Read telemetry via composer)' time='10.1775'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_context_propagated.phpt (Test baggage round-trip propagation and multiple header handling)' time='0.0141'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/simple.phpt (Simple telemetry test)' time='10.1634'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_configured_items.phpt (Test baggage header interaction with items limit configured)' time='0.0127'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/broken_pipe.phpt (Telemetry test with connection reset)' time='10.1759'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_default.phpt (Test baggage header interaction with default configurations)' time='0.0116'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_01.phpt (Filesystem integration depends on RASP. If RASP is not enabled, integration is disabled)' time='10.1699'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_wildcard.phpt (Test baggage span tags wildcard)' time='0.0128'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/config.phpt (Report user config telemetry)' time='10.1682'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_first.phpt (Test baggage header interaction when is configured as first)' time='0.0123'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/telemetry_process_tags.phpt (Test process_tags in application field)' time='10.1617'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/distributed_trace_baggage_decoding_encoding.phpt (Test baggage header behavior with encoding and decoding)' time='0.0130'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_02.phpt (Filesystem integration depends on RASP. If RASP is enabled but wrapped functions are not used, it is not enabled)' time='10.1591'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_empty.phpt (Test baggage span tags empty config)' time='0.0138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/integration_runtime_error.phpt (Send logs from integration)' time='10.1837'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_spans_created.phpt (&#039;spans_created&#039; internal metric)' time='10.1704'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags.phpt (Test baggage span tags default behavior)' time='0.0131'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_logs_created.phpt (&#039;logs_created&#039; internal metric)' time='10.1558'>
+<testcase name='tmp/build_extension/tests/ext/distributed_tracing/baggage/baggage_span_tags_keys.phpt (Test baggage span tags specifying keys)' time='0.0131'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.span_stack" tests="12" failures="0" errors="0" skip="0" time="0.1672">
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_clone_dropped_root.phpt (Cloning a span stack must not leave a dangling root_span alias when the root span is dropped (#3943))' time='0.0122'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/stack_dropped_parent.phpt (Span stacks are fully reset when the tracer is disabled and re-enabled)' time='0.0148'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_stack.phpt (Test creating a new span stack)' time='0.0128'>
+<testsuite name="php.tmp.build_extension.tests.ext.profiling" tests="2" failures="0" errors="0" skip="2" time="0.0248">
+<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_01.phpt (runtime-id exists in meta when profiling is enabled)' time='0.0120'>
+<skipped>: requires profiling</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap.phpt (Test creating a switching span stacks)' time='0.0144'>
+<testcase name='tmp/build_extension/tests/ext/profiling/runtime_id_02.phpt (runtime-id exists in meta when profiling is disabled)' time='0.0128'>
+<skipped>: requires profiling</skipped>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_swap.phpt (Test creating swapping traces)' time='0.0123'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.live.debugger" tests="8" failures="0" errors="0" skip="0" time="51.8194">
+<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_001.phpt (Test exception replay)' time='5.1901'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/start_span_new_trace.phpt (Test creating a new trace)' time='0.0128'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe.phpt (Installing a live debugger log probe)' time='17.4556'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_active_unset_child.phpt (SpanStack active unset does not corrupt child span opening)' time='0.0132'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe.phpt (Installing a live debugger span probe)' time='7.7928'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_active_reference.phpt (SpanStack active references do not corrupt child span opening)' time='0.0121'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_002.phpt (Test exception replay capture limits)' time='5.0862'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_swap_traced_function.phpt (Test swapping span stacks due to auto-close of spans by functions)' time='0.0114'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_decoration_probe.phpt (Installing a live debugger span decoration probe)' time='5.5634'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_trace_stack_autoclose.phpt (Test autoclosing of spans on abandoned span stacks)' time='0.0253'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_metric_probe.phpt (Installing a live debugger metric probe)' time='0.0322'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/start_top_level_span_stack.phpt (Test creating a new span stack on top level)' time='0.0134'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe_class.phpt (Installing a live debugger span probe on a class)' time='5.5590'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/span_stack/span_stack_clone.phpt (Test cloning a span stack)' time='0.0125'>
+<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_non_regression_2989_mysqli.phpt (Non regression test for use-after-free segfault in exception replay)' time='5.1401'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.appsec" tests="7" failures="0" errors="0" skip="0" time="71.0011">
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_05.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='10.1841'>
+<testsuite name="php.tmp.build_extension.tests.ext.telemetry" tests="12" failures="0" errors="0" skip="0" time="92.8794">
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_01.phpt (Filesystem integration depends on RASP. If RASP is not enabled, integration is disabled)' time='10.3178'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_01.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with default value)' time='10.1864'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_logs_created.phpt (&#039;logs_created&#039; internal metric)' time='10.3218'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/agentic_onboarding_is_sent_02.phpt (DD_APPSEC_AGENTIC_ONBOARDING flag is sent via telemetry with its raw value)' time='10.182'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/composer.phpt (Read telemetry via composer)' time='10.2736'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/agentic_onboarding_is_sent_01.phpt (DD_APPSEC_AGENTIC_ONBOARDING flag is sent via telemetry with default (empty) value)' time='10.0531'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_04.phpt (Filesystem integration can also be disabled with default integrations flag)' time='10.3031'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_02.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with true)' time='10.1588'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_02.phpt (Filesystem integration depends on RASP. If RASP is enabled but wrapped functions are not used, it is not enabled)' time='10.2940'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_03.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with false)' time='10.1661'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_runtime_error.phpt (Send logs from integration)' time='10.2513'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_04.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='10.0706'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration.phpt (Signal integration telemetry)' time='10.2731'>
 </testcase>
-</testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.live.debugger" tests="12" failures="0" errors="0" skip="0" time="118.5568">
-<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_non_regression_2989_mysqli.phpt (Non regression test for use-after-free segfault in exception replay)' time='0.5461'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_metric_probe.phpt (Installing a live debugger metric probe)' time='0.0313'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_002.phpt (Test exception replay capture limits)' time='0.5525'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/metrics_spans_created.phpt (&#039;spans_created&#039; internal metric)' time='10.2462'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe_capture_timeout.phpt (Live debugger log probe capture timeout with large data structure)' time='19.3229'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/config.phpt (Report user config telemetry)' time='0.1138'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/exception-replay_001.phpt (Test exception replay)' time='0.5401'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/integration_filesystem_03.phpt (Filesystem integration depends on RASP. If RASP is enabled and wrapped function are used, then it is enabled)' time='10.2402'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe.phpt (Installing a live debugger log probe)' time='19.0874'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/disabled.phpt (Disabled telemetry test)' time='0.1286'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_remove_shared_probe_id.phpt (Removing live debugger configs that share a probe id must not leave a dangling hook)' time='3.2402'>
+<testcase name='tmp/build_extension/tests/ext/telemetry/simple.phpt (Simple telemetry test)' time='0.1159'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_decoration_probe.phpt (Installing a live debugger span decoration probe)' time='19.2776'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_log_probe_process_tags.phpt (Live debugger log probe includes process_tags)' time='0.5389'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.call_user_func" tests="4" failures="0" errors="0" skip="0" time="0.0551">
+<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced.phpt (Test that call_user_func can trace inside a namespace)' time='0.0152'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe.phpt (Installing a live debugger span probe)' time='18.4126'>
+<testcase name='tmp/build_extension/tests/ext/call_user_func/namespaced-array.phpt (Test that call_user_func_array can trace inside a namespace)' time='0.0125'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_span_probe_class.phpt (Installing a live debugger span probe on a class)' time='18.7428'>
+<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced.phpt (Test that call_user_func can trace in global scope)' time='0.0139'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/live-debugger/debugger_enable_dynamic_config.phpt (Enabling dynamic instrumentation via dynamic configuration)' time='18.2644'>
+<testcase name='tmp/build_extension/tests/ext/call_user_func/not-namespaced-array.phpt (Test that call_user_func_array can trace in global scope)' time='0.0135'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.library_config" tests="6" failures="0" errors="0" skip="0" time="20.3285">
-<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_env.phpt (Check that the library config files overloads env vars)' time='0.0243'>
+<testsuite name="php.tmp.build_extension.tests.ext.request.replayer" tests="4" failures="3" errors="0" skip="0" time="37.8033">
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_exception_span_event.phpt (DDTrace\ExceptionSpanEvent serialization with overridden attributes)' time='12.1938'>
+<failure type='FAILED' message=''>     Caught exception: Exception in method
+002- string(%d) &quot;[{&quot;name&quot;:&quot;exception&quot;,&quot;time_unix_nano&quot;:%d,&quot;attributes&quot;:{&quot;exception.message&quot;:&quot;override message&quot;,&quot;exception.type&quot;:&quot;Exception&quot;,&quot;exception.stacktrace&quot;:&quot;#0 %s(%d): ExceptionClass-&gt;{%s}()\n#1 %s(%d): ExceptionClass-&gt;exceptionMethod()\n#2 {main}&quot;,&quot;custom.attribute&quot;:&quot;custom value&quot;}}]&quot;
+002+ 
+003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+004+ Stack trace:
+005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/request-replayer/dd_trace_exception_span_event.php(34): RequestReplayer-&gt;waitForDataAndReplay()
+006+ #1 {main}
+007+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_agent_env.phpt (Assert that the default environment can be read from agent info)' time='1.0278'>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_event.phpt (DDTrace\SpanEvent serialization with attributes)' time='12.1463'>
+<failure type='FAILED' message=''>     In testMethod
+002- string(134) &quot;[{&quot;name&quot;:&quot;event-name&quot;,&quot;time_unix_nano&quot;:1720037568765201300,&quot;attributes&quot;:{&quot;arg1&quot;:&quot;value1&quot;,&quot;int_array&quot;:[3,4],&quot;string_array&quot;:[&quot;5&quot;,&quot;6&quot;]}}]&quot;
+002+ 
+003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+004+ Stack trace:
+005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/request-replayer/dd_trace_span_event.php(27): RequestReplayer-&gt;waitForDataAndReplay()
+006+ #1 {main}
+007+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+</failure>
+</testcase>
+<testcase name='tmp/build_extension/tests/ext/request-replayer/dd_trace_span_link_with_exception.phpt (Span Link serialization with non-null EG(exception) doesn&#039;t fail)' time='12.4354'>
+<failure type='FAILED' message=''>     Caught exception: Oops!
+002- string(%d) &quot;Uncaught Exception: Oops! in %sdd_trace_span_link_with_exception.php:17&quot;
+003- string(9) &quot;Exception&quot;
+004- string(%d) &quot;#0 %sdd_trace_span_link_with_exception.php(12): Foo-&gt;doException()
+005- #1 %sdd_trace_span_link_with_exception.php(33): Foo-&gt;bar()
+006- #2 {main}&quot;
+007- string(33) &quot;[{&quot;trace_id&quot;:&quot;42&quot;,&quot;span_id&quot;:&quot;6&quot;}]&quot;
+002+ 
+003+ Fatal error: Uncaught Exception: wait for replay timeout in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc:78
+004+ Stack trace:
+005+ #0 /home/circleci/app/tmp/build_extension/tests/ext/request-replayer/dd_trace_span_link_with_exception.php(38): RequestReplayer-&gt;waitForDataAndReplay()
+006+ #1 {main}
+007+   thrown in /home/circleci/app/tmp/build_extension/tests/ext/includes/request_replayer.inc on line 78
+</failure>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/local_config.phpt (Check the library config files)' time='10.0675'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config_overloads_ini.phpt (Check that the library config files overloads ini settings)' time='0.0271'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/local_config_overloads_ini.phpt (Check the library config files)' time='0.0278'>
-</testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/local_config_does_not_overload_env.phpt (Check the library config files)' time='0.0246'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.remote_config" tests="2" failures="0" errors="0" skip="0" time="10.5994">
+<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_update.phpt (Test dynamic config update)' time='5.5379'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/library_config/fleet_config.phpt (Check the library config files)' time='10.1572'>
+<testcase name='tmp/build_extension/tests/ext/remote_config/dynamic_config_auto_update.phpt (Test dynamic config update)' time='5.0615'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.ffe" tests="6" failures="0" errors="0" skip="0" time="0.3644">
-<testcase name='tmp/build_extension/tests/ext/ffe/evaluation_metrics_native.phpt (FFE evaluation metrics use native recorder)' time='0.0114'>
+<testsuite name="php.tmp.build_extension.tests.ext.integrations.source_code.002" tests="1" failures="0" errors="0" skip="0" time="0.0262">
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/002/git_metadata_injection_from_invalid_files.phpt (Basic Git Metadata Injection from invalid .git files (Repository URL &amp; Commit Sha))' time='0.0262'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ffe/system_test_data_evaluate.phpt (FFE canonical system test data evaluates through the Datadog client)' time='0.0502'>
+</testsuite>
+<testsuite name="php.tmp.build_extension.tests.ext.appsec" tests="5" failures="0" errors="0" skip="0" time="41.1727">
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_01.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with default value)' time='10.2554'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ffe/native_bridge_evaluate.phpt (FFE native bridge evaluates through libdatadog)' time='0.0129'>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_05.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='10.2413'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ffe/remote_config_lifecycle.phpt (FFE Remote Config loads and removes UFC config)' time='0.2304'>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_04.phpt (DD_APPSEC_SCA_ENABLED is set by INI)' time='0.1143'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ffe/serial_id_passthrough.phpt (FFE native bridge surfaces the split serial_id (Rust FfeResult -&gt; C reader -&gt; PHP) for APM span enrichment)' time='0.0152'>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_02.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with true)' time='10.2685'>
 </testcase>
-<testcase name='tmp/build_extension/tests/ext/ffe/evaluation_metrics_unix_agent_endpoint.phpt (FFE evaluation metrics flush over DD_TRACE_AGENT_URL unix domain socket)' time='0.0443'>
+<testcase name='tmp/build_extension/tests/ext/appsec/sca_flag_is_sent_03.phpt (DD_APPSEC_SCA_ENABLED flag is sent to via telemetry with false)' time='10.2932'>
 </testcase>
 </testsuite>
-<testsuite name="PHP.tmp.build_extension.tests.ext.integrations.source_code.002" tests="1" failures="0" errors="0" skip="0" time="0.0258">
-<testcase name='tmp/build_extension/tests/ext/integrations/source_code/002/git_metadata_injection_from_invalid_files.phpt (Basic Git Metadata Injection from invalid .git files (Repository URL &amp; Commit Sha))' time='0.0258'>
+<testsuite name="php.tmp.build_extension.tests.ext.integrations.source_code.001" tests="1" failures="0" errors="0" skip="0" time="0.025">
+<testcase name='tmp/build_extension/tests/ext/integrations/source_code/001/git_metadata_injection_from_valid_files.phpt (Basic Git Metadata Injection from valid .git files (Repository URL &amp; Commit Sha))' time='0.0250'>
 </testcase>
 </testsuite>
 </testsuites>
\ No newline at end of file
diff --git a/src/DDTrace/Integrations/Slim/SlimIntegration.php b/src/DDTrace/Integrations/Slim/SlimIntegration.php
index 8c1725dec0..5669550a2d 100644
--- a/src/DDTrace/Integrations/Slim/SlimIntegration.php
+++ b/src/DDTrace/Integrations/Slim/SlimIntegration.php
@@ -99,7 +99,6 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                             $route = $return;
                             $pattern = $route->getPattern();
                             $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
-                            // Normalized route will be refined in traceControllers once matched params are available
                             $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
                             if ($normalizedRoute !== null) {
                                 $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 58d43edef4..aaf1ae1f79 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -2,28 +2,15 @@
 
 namespace DDTrace\Util;
 
-/**
- * Normalizes framework-specific HTTP route strings to the _dd.appsec.normalized_route format
- * defined in RFC-1103.
- *
- * The normalized route is a slash-separated sequence of atomic elements where each element
- * is either a static constant (only [A-Za-z0-9.-~_], others URL-encoded) or a dynamic
- * parameter in {name} notation. Parameters in the same URL segment are combined with
- * the '+' marker.
- *
- * @internal
- */
+/** @internal */
 class RouteNormalizer
 {
     /**
      * Normalize a Laravel route URI.
      *
-     * Laravel uses {param} for required and {param?} for optional parameters.
-     * Mixed-segment routes like /photos/{id}.{format} become /photos/{id+format}.
-     *
-     * @param string $routeUri  URI from $route->uri(), e.g. "/users/{id}/{format?}"
-     * @param array  $matchedParams  Parameters from $route->parameters(); used to resolve optionals
-     * @return string|null Normalized route, or null on parse failure
+     * @param string $routeUri     URI from $route->uri(), e.g. "/users/{id}/{format?}"
+     * @param array  $matchedParams Parameters from $route->parameters(); used to resolve optionals
+     * @return string|null
      */
     public static function normalizeFromLaravel(string $routeUri, array $matchedParams = [])
     {
@@ -33,10 +20,7 @@ public static function normalizeFromLaravel(string $routeUri, array $matchedPara
     /**
      * Normalize a Slim route pattern.
      *
-     * Slim uses {param} or {param:regex} for required parameters. Slim 4 supports optional
-     * segments in square brackets: /users/{id}[/{format}].
-     *
-     * @param string $pattern       Pattern from $route->getPattern(), e.g. "/users/{id:[0-9]+}"
+     * @param string $pattern      Pattern from $route->getPattern(), e.g. "/users/{id:[0-9]+}"
      * @param array  $matchedParams Matched params from $route->getArguments(); resolves optionals
      * @return string|null
      */
@@ -48,8 +32,6 @@ public static function normalizeFromSlim(string $pattern, array $matchedParams =
     /**
      * Normalize a Symfony route path.
      *
-     * The path produced by EndpointCatalog::pathForRoute() already uses {param} notation.
-     *
      * @param string $path Path template, e.g. "/users/{id}"
      * @return string|null
      */
@@ -63,21 +45,18 @@ public static function normalizeFromSymfony(string $path)
      *
      * Laminas uses :param for dynamic parameters and [...] for optional sections.
      * The Wildcard route type produces "/*" which is treated as a catch-all.
-     * Example: "/users/:id[.:format]"
      *
-     * @param string      $template     Template from httpRouteTemplateFromMatchedRoute()
+     * @param string      $template      Template from httpRouteTemplateFromMatchedRoute()
      * @param array       $matchedParams Matched params from $routeMatch->getParams()
-     * @param string|null $urlPath      The raw request URL path; used to exclude optional
-     *                                  sections whose params were injected by middleware
-     *                                  rather than matched from the URL (e.g. Laminas API
-     *                                  Tools VersionListener sets :version even without a
-     *                                  /v1/ prefix).
+     * @param string|null $urlPath       The raw request URL path; filters out optional sections
+     *                                   whose params were injected by middleware rather than
+     *                                   matched from the URL (e.g. Laminas API Tools
+     *                                   VersionListener sets :version even without a /v1/ prefix)
      * @return string|null
      */
-    public static function normalizeFromLaminas(string $template, array $matchedParams = [], $urlPath = null)
+    public static function normalizeFromLaminas(string $template, array $matchedParams = [], ?string $urlPath = null)
     {
         $expanded = self::expandBracketOptionals($template, $matchedParams, ':', $urlPath);
-        // Convert wildcard segments ('*') to a {param} placeholder before brace conversion
         $expanded = preg_replace('#/\*$#', '/{param1}', $expanded);
         $braceFormat = self::colonParamsToBraces($expanded);
         return self::normalizeBraceRoute($braceFormat, $matchedParams);
@@ -86,8 +65,6 @@ public static function normalizeFromLaminas(string $template, array $matchedPara
     /**
      * Normalize a CakePHP route template.
      *
-     * CakePHP uses :param syntax and * / ** for catch-all segments.
-     *
      * @param string $template Template from $app->template, e.g. "/articles/:id.:ext"
      * @return string|null
      */
@@ -100,9 +77,6 @@ public static function normalizeFromCakePHP(string $template)
     /**
      * Normalize a Yii route path containing :param placeholders.
      *
-     * The Yii integration builds a URL via Url::toRoute() with ":paramName" as
-     * placeholder values, producing a path like "/articles/:id".
-     *
      * @param string $routePath Path from Url::toRoute() with colon placeholders
      * @return string|null
      */
@@ -164,13 +138,9 @@ public static function normalizeFromCodeIgniter(string $route)
      */
     public static function normalizeFromWordPress(string $matchedRule)
     {
-        $rule = $matchedRule;
-
-        // Strip regex anchors
-        $rule = ltrim($rule, '^');
+        $rule = ltrim($matchedRule, '^');
         $rule = rtrim($rule, '$');
 
-        // Strip optional trailing slash pattern "\/?" or "/?"
         if (preg_match('#\\\\?/\?$#', $rule, $m)) {
             $rule = substr($rule, 0, -strlen($m[0]));
         }
@@ -180,7 +150,6 @@ public static function normalizeFromWordPress(string $matchedRule)
             return '/';
         }
 
-        // Use bracket-aware splitting so that [^/] character classes are not split
         $segments = self::splitRegexBySlash($rule);
         $normalizedSegments = [];
         $paramIndex = 1;
@@ -191,26 +160,20 @@ public static function normalizeFromWordPress(string $matchedRule)
             }
 
             if (preg_match('/^\([^)]+\)$/', $segment)) {
-                // Whole segment is a single capture group
                 $normalizedSegments[] = '{param' . $paramIndex++ . '}';
             } elseif (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
-                // Contains regex metacharacters → treat as dynamic
                 $normalizedSegments[] = '{param' . $paramIndex++ . '}';
             } else {
                 $normalizedSegments[] = self::encodeStaticSegment($segment);
             }
         }
 
-        if (empty($normalizedSegments)) {
-            return '/{param1}';
-        }
-
         return '/' . implode('/', $normalizedSegments);
     }
 
     /**
-     * Split a regex string by '/' but do not split inside character classes [...].
-     * This prevents [^/] from being broken into two segments.
+     * Split a regex string by '/' but not inside character classes [...].
+     * Prevents [^/] from being split into two segments.
      */
     private static function splitRegexBySlash(string $str): array
     {
@@ -246,21 +209,10 @@ private static function splitRegexBySlash(string $str): array
         return $segments;
     }
 
-    // -------------------------------------------------------------------------
-    // Core brace-format normalizer
-    // -------------------------------------------------------------------------
-
     /**
      * Normalize a route that uses {param} notation.
      *
-     * Handles:
-     *   {param}        - required parameter
-     *   {param?}       - optional parameter (resolved via $matchedParams)
-     *   {param:regex}  - regex-constrained parameter (constraint stripped)
-     *   [{param}]      - optional segment (Slim-style; only when $expandSquare=true)
-     *   Static text mixed with params in a segment → single combined element
-     *
-     * @param bool $expandSquare  When true, expand Slim-style [...] optional sections
+     * @param bool $expandSquare When true, expand Slim-style [...] optional sections
      */
     private static function normalizeBraceRoute(
         string $route,
@@ -294,7 +246,6 @@ private static function normalizeBraceRoute(
 
             $result = self::normalizeBraceSegment($segment, $matchedParams);
             if ($result === null) {
-                // Optional segment whose parameter is absent — skip
                 continue;
             }
 
@@ -326,7 +277,6 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
                 $raw = substr($raw, 0, -1);
             }
 
-            // Strip regex constraint: {param:regex} → param
             $colon = strpos($raw, ':');
             if ($colon !== false) {
                 $raw = substr($raw, 0, $colon);
@@ -345,21 +295,14 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
             return '{' . $paramNames[0] . '}';
         }
 
-        // Multiple params in the same segment → combine with the '+' marker
         return '{' . implode('+', $paramNames) . '}';
     }
 
-    // -------------------------------------------------------------------------
-    // Optional-section expanders
-    // -------------------------------------------------------------------------
-
     /**
-     * Expand Slim-style optional sections [...] in a route based on matched params.
-     * Example: "/users/{id}[/{format}]" with format present → "/users/{id}/{format}"
+     * Expand Slim-style optional sections [...] based on matched params.
      */
     private static function expandSquareBracketOptionals(string $route, array $matchedParams): string
     {
-        // Expand from innermost to outermost by looping until stable
         $prev = null;
         while ($prev !== $route) {
             $prev = $route;
@@ -371,7 +314,6 @@ function ($m) use ($matchedParams) {
                     $innerParams = $pm[1];
 
                     if (empty($innerParams)) {
-                        // Purely static optional section — include it (best effort)
                         return $inner;
                     }
 
@@ -391,18 +333,17 @@ function ($m) use ($matchedParams) {
 
     /**
      * Expand Laminas [...] optional sections based on matched params.
-     * Example: "/:id[.:format]" with format present → "/:id.:format"
      *
      * When $urlPath is provided, an optional section is only expanded if the
      * section text with param values substituted is a substring of $urlPath.
-     * This prevents middleware-injected params (e.g. Laminas API Tools version)
-     * from incorrectly triggering expansion of sections absent from the URL.
+     * This prevents middleware-injected params from incorrectly triggering
+     * expansion of sections absent from the URL.
      */
     private static function expandBracketOptionals(
         string $template,
         array $matchedParams,
         string $paramPrefix = ':',
-        $urlPath = null
+        ?string $urlPath = null
     ): string {
         $prev = null;
         while ($prev !== $template) {
@@ -420,10 +361,6 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                             continue;
                         }
                         if ($urlPath !== null) {
-                            // Substitute the param value into the inner template text and
-                            // verify the result is present in the actual URL path.  This
-                            // filters out params injected by middleware (e.g. a default
-                            // :version added by Laminas API Tools) that are not in the URL.
                             $value = (string)$matchedParams[$param];
                             $innerWithValue = preg_replace(
                                 '/' . preg_quote($paramPrefix . $param, '/') . '/',
@@ -445,10 +382,6 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
         return $template;
     }
 
-    // -------------------------------------------------------------------------
-    // Framework-specific syntax converters
-    // -------------------------------------------------------------------------
-
     /**
      * Convert ":paramName" colon-prefix notation to "{paramName}" brace notation.
      * Laminas segment constraints like ":param{constraint}" are also handled.
@@ -466,15 +399,11 @@ static function ($m) {
 
     /**
      * Convert CakePHP route template syntax to brace notation.
-     * Handles :param and * / ** catch-all segments.
      */
     private static function cakephpToBraces(string $template): string
     {
-        // Replace /** and /* with a {catchall} placeholder
         $result = preg_replace('#/\*\*#', '/{catchall}', $template);
         $result = preg_replace('#/\*(?!\*)#', '/{catchall}', $result);
-
-        // Replace remaining bare * (e.g. at start or standalone segment)
         $result = preg_replace('#(?<![/*])\*(?![/*])#', '{catchall}', $result);
 
         return preg_replace_callback(
@@ -486,10 +415,6 @@ static function ($m) {
         );
     }
 
-    // -------------------------------------------------------------------------
-    // Character-level encoding helpers
-    // -------------------------------------------------------------------------
-
     /**
      * URL-encode characters in a static segment that are outside [A-Za-z0-9.-~_].
      * Already-encoded percent sequences are left intact (hex digits uppercased).
@@ -523,9 +448,8 @@ public static function encodeStaticSegment(string $segment): string
 
     /**
      * URL-encode reserved characters in a parameter name.
-     * Reserved: /?#+{} — these must not appear literally.
-     * The '+' sign is the combining marker and must be encoded if it appears in a
-     * framework-supplied name.
+     * Reserved: /?#+{} — these must not appear literally in a parameter name.
+     * The '+' combining marker must be encoded if it appears in a framework-supplied name.
      */
     public static function encodeParamName(string $name): string
     {
diff --git a/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php b/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
index 6b514a3848..04aa4da639 100644
--- a/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
+++ b/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
@@ -25,14 +25,12 @@ public static function getTestedLibrary()
 
     private static function restFieldsToIgnore(): array
     {
-        // http.status_code and error.message vary between PHP/Laminas versions and are not
-        // under the tracer's control, so exclude them from snapshot comparison.
-        return array_merge(
-            ['metrics.php.compilation.total_time_ms', 'metrics.php.memory.peak_usage_bytes',
-             'metrics.php.memory.peak_real_usage_bytes', 'meta.error.stack', 'meta._dd.p.tid',
-             'start', 'duration'],
-            ['meta.http.status_code', 'meta.error.message']
-        );
+        // http.status_code and error.message vary between PHP/Laminas versions
+        return [
+            'metrics.php.compilation.total_time_ms', 'metrics.php.memory.peak_usage_bytes',
+            'metrics.php.memory.peak_real_usage_bytes', 'meta.error.stack', 'meta._dd.p.tid',
+            'start', 'duration', 'meta.http.status_code', 'meta.error.message',
+        ];
     }
 
     public function testScenarioRest4xx()
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 5b9c7785d3..2a9985718f 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -7,9 +7,7 @@
 
 class RouteNormalizerTest extends BaseTestCase
 {
-    // -------------------------------------------------------------------------
     // encodeStaticSegment
-    // -------------------------------------------------------------------------
 
     public function testEncodeStaticSegmentAllowed()
     {
@@ -30,9 +28,7 @@ public function testEncodeStaticSegmentPreservesExistingPercentEncoding()
         $this->assertSame('%2F', RouteNormalizer::encodeStaticSegment('%2f'));
     }
 
-    // -------------------------------------------------------------------------
     // encodeParamName
-    // -------------------------------------------------------------------------
 
     public function testEncodeParamNamePreservesNormal()
     {
@@ -50,9 +46,7 @@ public function testEncodeParamNameEncodesReserved()
         $this->assertSame('foo%23bar', RouteNormalizer::encodeParamName('foo#bar'));
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromLaravel
-    // -------------------------------------------------------------------------
 
     public function testLaravelSimpleRoute()
     {
@@ -107,9 +101,7 @@ public function testLaravelRoot()
         $this->assertSame('/', RouteNormalizer::normalizeFromLaravel('/'));
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromSlim
-    // -------------------------------------------------------------------------
 
     public function testSlimSimpleRoute()
     {
@@ -139,9 +131,7 @@ public function testSlimCatchAll()
         $this->assertSame('/files/{file}', RouteNormalizer::normalizeFromSlim('/files/{file:.+}'));
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromSymfony
-    // -------------------------------------------------------------------------
 
     public function testSymfonySimpleRoute()
     {
@@ -160,9 +150,7 @@ public function testSymfonyStaticOnlyRoute()
         $this->assertSame('/dump-request', RouteNormalizer::normalizeFromSymfony('/dump-request'));
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromLaminas
-    // -------------------------------------------------------------------------
 
     public function testLaminasSimpleColon()
     {
@@ -193,9 +181,7 @@ public function testLaminasWildcard()
         $this->assertSame('/{param1}', $result);
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromCakePHP
-    // -------------------------------------------------------------------------
 
     public function testCakePHPSimpleColon()
     {
@@ -219,9 +205,7 @@ public function testCakePHPStaticRoute()
         $this->assertSame('/admin/dashboard', RouteNormalizer::normalizeFromCakePHP('/admin/dashboard'));
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromYii
-    // -------------------------------------------------------------------------
 
     public function testYiiSimpleColonPlaceholder()
     {
@@ -233,9 +217,7 @@ public function testYiiStaticRoute()
         $this->assertSame('/site/index', RouteNormalizer::normalizeFromYii('/site/index'));
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromCodeIgniter
-    // -------------------------------------------------------------------------
 
     public function testCodeIgniterLiteralRoute()
     {
@@ -264,9 +246,7 @@ public function testCodeIgniterCatchAll()
         $this->assertSame('/{param1}', RouteNormalizer::normalizeFromCodeIgniter(':any'));
     }
 
-    // -------------------------------------------------------------------------
     // normalizeFromWordPress
-    // -------------------------------------------------------------------------
 
     public function testWordPressSimpleRegex()
     {
@@ -292,9 +272,7 @@ public function testWordPressRootRule()
         $this->assertSame('/', $result);
     }
 
-    // -------------------------------------------------------------------------
     // RFC examples
-    // -------------------------------------------------------------------------
 
     public function testRfcExampleFastApi()
     {

From adf0671fdcd674adc642e04663cca8d9381beb15 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 13 Aug 2026 13:16:27 +0200
Subject: [PATCH 06/54] Fix pipeline

---
 src/DDTrace/Util/RouteNormalizer.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index aaf1ae1f79..eb1a7cef9c 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -54,7 +54,7 @@ public static function normalizeFromSymfony(string $path)
      *                                   VersionListener sets :version even without a /v1/ prefix)
      * @return string|null
      */
-    public static function normalizeFromLaminas(string $template, array $matchedParams = [], ?string $urlPath = null)
+    public static function normalizeFromLaminas(string $template, array $matchedParams = [], $urlPath = null)
     {
         $expanded = self::expandBracketOptionals($template, $matchedParams, ':', $urlPath);
         $expanded = preg_replace('#/\*$#', '/{param1}', $expanded);
@@ -343,7 +343,7 @@ private static function expandBracketOptionals(
         string $template,
         array $matchedParams,
         string $paramPrefix = ':',
-        ?string $urlPath = null
+        $urlPath = null
     ): string {
         $prev = null;
         while ($prev !== $template) {

From d65cbb02fdb9de6354a6bcf7f900921db341c6e4 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 13 Aug 2026 15:49:28 +0200
Subject: [PATCH 07/54] Remove non required changes

---
 .../Laminas/ApiTools/Latest/RESTTest.php         | 16 +++-------------
 ...s.latest.rest_test.test_scenario_rest2xx.json |  2 +-
 ...s.latest.rest_test.test_scenario_rest4xx.json |  2 +-
 ...s.latest.rest_test.test_scenario_rest5xx.json |  8 ++++----
 4 files changed, 9 insertions(+), 19 deletions(-)

diff --git a/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php b/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
index 04aa4da639..b8ffe5278f 100644
--- a/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
+++ b/tests/Integrations/Laminas/ApiTools/Latest/RESTTest.php
@@ -23,16 +23,6 @@ public static function getTestedLibrary()
         return 'laminas-api-tools/api-tools';
     }
 
-    private static function restFieldsToIgnore(): array
-    {
-        // http.status_code and error.message vary between PHP/Laminas versions
-        return [
-            'metrics.php.compilation.total_time_ms', 'metrics.php.memory.peak_usage_bytes',
-            'metrics.php.memory.peak_real_usage_bytes', 'meta.error.stack', 'meta._dd.p.tid',
-            'start', 'duration', 'meta.http.status_code', 'meta.error.message',
-        ];
-    }
-
     public function testScenarioRest4xx()
     {
         $this->tracesFromWebRequestSnapshot(function () {
@@ -42,7 +32,7 @@ public function testScenarioRest4xx()
                     '/datadog-rest-service/1'
                 )
             );
-        }, self::restFieldsToIgnore());
+        });
     }
 
     public function testScenarioRest2xx()
@@ -56,7 +46,7 @@ public function testScenarioRest2xx()
                     ['data' => 'dog']
                 )
             );
-        }, self::restFieldsToIgnore());
+        });
     }
 
     public function testScenarioRest5xx()
@@ -68,6 +58,6 @@ public function testScenarioRest5xx()
                     '/datadog-rest-service/42'
                 )
             );
-        }, self::restFieldsToIgnore());
+        });
     }
 }
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
index 58e745746b..395db3b805 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
@@ -13,7 +13,7 @@
       "http.method": "POST",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
       "_dd.appsec.normalized_route": "/datadog-rest-service",
-      "http.status_code": "200",
+      "http.status_code": "201",
       "http.url": "http://localhost/datadog-rest-service",
       "http.version": "1.1",
       "laminas.route.action": "DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource@create",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
index d8e7862b4d..a4be1a9090 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
@@ -13,7 +13,7 @@
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
       "_dd.appsec.normalized_route": "/datadog-rest-service/{datadog_rest_service_id}",
-      "http.status_code": "200",
+      "http.status_code": "405",
       "http.url": "http://localhost/datadog-rest-service/1",
       "http.version": "1.1",
       "laminas.route.action": "DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource@fetch",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
index 401bbf64c1..90a025e6b1 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
@@ -11,13 +11,13 @@
     "meta": {
       "_dd.p.dm": "-0",
       "component": "laminas",
-      "error.message": "Uncaught Error: Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
+      "error.message": "Uncaught Error (500): Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
       "error.stack": "#0 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/AbstractResourceListener.php(182): DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource->fetch()\n#1 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\AbstractResourceListener->dispatch()\n#2 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#3 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(544): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#4 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(499): Laminas\\ApiTools\\Rest\\Resource->triggerEvent()\n#5 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(493): Laminas\\ApiTools\\Rest\\Resource->fetch()\n#6 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(372): Laminas\\ApiTools\\Rest\\RestController->get()\n#7 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(335): Laminas\\Mvc\\Controller\\AbstractRestfulController->onDispatch()\n#8 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\RestController->onDispatch()\n#9 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#10 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractController.php(105): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#11 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(306): Laminas\\Mvc\\Controller\\AbstractController->dispatch()\n#12 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/DispatchListener.php(117): Laminas\\Mvc\\Controller\\AbstractRestfulController->dispatch()\n#13 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\Mvc\\DispatchListener->onDispatch()\n#14 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#15 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Application.php(319): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#16 {path}/tests/Frameworks/Laminas/ApiTools/Latest/public/index.php(60): Laminas\\Mvc\\Application->run()\n#17 {main}",
       "error.type": "Error",
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
       "_dd.appsec.normalized_route": "/datadog-rest-service/{datadog_rest_service_id}",
-      "http.status_code": "200",
+      "http.status_code": "500",
       "http.url": "http://localhost/datadog-rest-service/42",
       "http.version": "1.1",
       "laminas.route.action": "DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource@fetch",
@@ -376,7 +376,7 @@
                    "error": 1,
                    "meta": {
                      "component": "laminas",
-                     "error.message": "Thrown Error: Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
+                     "error.message": "Thrown Error (500): Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
                      "error.stack": "#0 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/AbstractResourceListener.php(182): DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource->fetch()\n#1 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\AbstractResourceListener->dispatch()\n#2 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#3 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(544): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#4 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(499): Laminas\\ApiTools\\Rest\\Resource->triggerEvent()\n#5 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(493): Laminas\\ApiTools\\Rest\\Resource->fetch()\n#6 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(372): Laminas\\ApiTools\\Rest\\RestController->get()\n#7 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(335): Laminas\\Mvc\\Controller\\AbstractRestfulController->onDispatch()\n#8 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\RestController->onDispatch()\n#9 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#10 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractController.php(105): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#11 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(306): Laminas\\Mvc\\Controller\\AbstractController->dispatch()\n#12 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/DispatchListener.php(117): Laminas\\Mvc\\Controller\\AbstractRestfulController->dispatch()\n#13 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\Mvc\\DispatchListener->onDispatch()\n#14 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#15 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Application.php(319): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#16 {path}/tests/Frameworks/Laminas/ApiTools/Latest/public/index.php(60): Laminas\\Mvc\\Application->run()\n#17 {main}",
                      "error.type": "Error"
                    }
@@ -392,7 +392,7 @@
                       "error": 1,
                       "meta": {
                         "component": "laminas",
-                        "error.message": "Thrown Error: Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
+                        "error.message": "Thrown Error (500): Attempt to assign property \"b\" on null in {path}/tests/Frameworks/Laminas/ApiTools/Latest/module/DatadogApi/src/V1/Rest/DatadogRestService/DatadogRestServiceResource.php:55",
                         "error.stack": "#0 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/AbstractResourceListener.php(182): DatadogApi\\V1\\Rest\\DatadogRestService\\DatadogRestServiceResource->fetch()\n#1 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\AbstractResourceListener->dispatch()\n#2 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#3 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(544): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#4 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/Resource.php(499): Laminas\\ApiTools\\Rest\\Resource->triggerEvent()\n#5 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(493): Laminas\\ApiTools\\Rest\\Resource->fetch()\n#6 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(372): Laminas\\ApiTools\\Rest\\RestController->get()\n#7 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas-api-tools/api-tools-rest/src/RestController.php(335): Laminas\\Mvc\\Controller\\AbstractRestfulController->onDispatch()\n#8 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\ApiTools\\Rest\\RestController->onDispatch()\n#9 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#10 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractController.php(105): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#11 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Controller/AbstractRestfulController.php(306): Laminas\\Mvc\\Controller\\AbstractController->dispatch()\n#12 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/DispatchListener.php(117): Laminas\\Mvc\\Controller\\AbstractRestfulController->dispatch()\n#13 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(319): Laminas\\Mvc\\DispatchListener->onDispatch()\n#14 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-eventmanager/src/EventManager.php(177): Laminas\\EventManager\\EventManager->triggerListeners()\n#15 {path}/tests/Frameworks/Laminas/ApiTools/Latest/vendor/laminas/laminas-mvc/src/Application.php(319): Laminas\\EventManager\\EventManager->triggerEventUntil()\n#16 {path}/tests/Frameworks/Laminas/ApiTools/Latest/public/index.php(60): Laminas\\Mvc\\Application->run()\n#17 {main}",
                         "error.type": "Error"
                       }

From c019f123bd76e1c31af740b706fd36a948ac2475 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 11:43:31 +0200
Subject: [PATCH 08/54] Fix special route

---
 src/DDTrace/Util/RouteNormalizer.php               | 4 ++++
 tests/Unit/Util/Normalizer/RouteNormalizerTest.php | 2 ++
 2 files changed, 6 insertions(+)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index eb1a7cef9c..fe001bad12 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -235,6 +235,10 @@ private static function normalizeBraceRoute(
             $route = self::expandSquareBracketOptionals($route, $matchedParams);
         }
 
+        // Strip inline constraints before splitting so that a '/' inside a
+        // constraint (e.g. Slim's {name:[^/]+}) does not break the segment split.
+        $route = preg_replace('/\{([a-zA-Z_][a-zA-Z0-9_]*)[^}]*\}/', '{$1}', $route);
+
         $raw = ltrim($route, '/');
         $parts = explode('/', $raw);
         $normalizedSegments = [];
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 2a9985718f..af460eaa21 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -112,6 +112,8 @@ public function testSlimRegexConstraintStripped()
     {
         $this->assertSame('/users/{id}', RouteNormalizer::normalizeFromSlim('/users/{id:[0-9]+}'));
         $this->assertSame('/v2/{name}/blobs', RouteNormalizer::normalizeFromSlim('/v2/{name:[a-zA-Z0-9-]+}/blobs'));
+        // Constraint containing '/' must not break the segment split
+        $this->assertSame('/files/{name}', RouteNormalizer::normalizeFromSlim('/files/{name:[^/]+}'));
     }
 
     public function testSlimOptionalSegmentPresent()

From d3cda147b486b3cd8721f49ffb76d36c74ed7db4 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 11:45:36 +0200
Subject: [PATCH 09/54] Refine slim routes

---
 src/DDTrace/Integrations/Slim/SlimIntegration.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/src/DDTrace/Integrations/Slim/SlimIntegration.php b/src/DDTrace/Integrations/Slim/SlimIntegration.php
index 5669550a2d..df2cff2ef1 100644
--- a/src/DDTrace/Integrations/Slim/SlimIntegration.php
+++ b/src/DDTrace/Integrations/Slim/SlimIntegration.php
@@ -154,6 +154,15 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                     } else {
                         $rootSpan->meta['slim.route.controller'] = $callableName;
                         $span->name = 'slim.route.controller';
+                        // Refine normalized route now that matched params are available (Slim 3)
+                        $matchedParams = isset($args[3]) && is_array($args[3]) ? $args[3] : [];
+                        $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
+                        if ($pattern !== '') {
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams);
+                            if ($normalizedRoute !== null) {
+                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                            }
+                        }
                     }
                 };
 

From af5e7533654e2dd350f73e6563b779772a14976a Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 12:27:55 +0200
Subject: [PATCH 10/54] Fix codeigniter

---
 .../Integrations/CodeIgniter/V2/CodeIgniterIntegration.php  | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
index 8b1b4ad6c0..d6a71441f0 100644
--- a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
+++ b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
@@ -259,9 +259,7 @@ private static function setHttpRoute($router, $rootSpan) {
         // If we got this far it means we didn't encounter a
         // matching route so we'll set the site default route
         $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
-        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($uri);
-        if ($normalizedRoute !== null) {
-            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-        }
+        // $uri is the concrete request path here, not a route template, so
+        // APPSEC_NORMALIZED_ROUTE is not set to avoid emitting real parameter values.
     }
 }

From e4a5bede349afcc33ee1d96eb46d2d4b89a3368e Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 12:40:17 +0200
Subject: [PATCH 11/54] Fix wordpress

---
 .../WordPress/WordPressIntegrationLoader.php  |  3 ++-
 src/DDTrace/Util/RouteNormalizer.php          | 27 +++++++++++++++++--
 .../Util/Normalizer/RouteNormalizerTest.php   | 20 ++++++++++++++
 3 files changed, 47 insertions(+), 3 deletions(-)

diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index 119f68b1bf..dca2a4b0c5 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -733,7 +733,8 @@ function_exists('is_404') && is_404() === false) {
                 if (\property_exists($This, 'matched_rule')) {
                     $matchedRule = $This->matched_rule;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $matchedRule;
-                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule);
+                    $urlPath = \property_exists($This, 'request') ? $This->request : null;
+                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
                     if ($normalizedRoute !== null) {
                         $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index fe001bad12..666e097bea 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -133,11 +133,28 @@ public static function normalizeFromCodeIgniter(string $route)
      * WordPress route matching uses regex rules like "^blog/([^/]+)/?$".
      * Named parameters are not available; placeholders param1, param2, … are used.
      *
-     * @param string $matchedRule Value of $wp->matched_rule
+     * @param string      $matchedRule Value of $wp->matched_rule
+     * @param string|null $urlPath     Value of $wp->request; used to detect which
+     *                                 optional capture groups actually participated
+     *                                 in the match, so phantom segments are not emitted.
      * @return string|null
      */
-    public static function normalizeFromWordPress(string $matchedRule)
+    public static function normalizeFromWordPress(string $matchedRule, $urlPath = null)
     {
+        // Re-run the regex against the actual URL to find how many capture groups matched.
+        // This handles optional groups like (?:/([0-9]+))? that may or may not be present.
+        $matchedGroupCount = null;
+        if ($urlPath !== null) {
+            if (@preg_match('#^' . $matchedRule . '#', ltrim($urlPath, '/'), $captures)) {
+                $matchedGroupCount = 0;
+                for ($i = 1; $i < count($captures); $i++) {
+                    if (isset($captures[$i]) && $captures[$i] !== '') {
+                        $matchedGroupCount = $i;
+                    }
+                }
+            }
+        }
+
         $rule = ltrim($matchedRule, '^');
         $rule = rtrim($rule, '$');
 
@@ -160,8 +177,14 @@ public static function normalizeFromWordPress(string $matchedRule)
             }
 
             if (preg_match('/^\([^)]+\)$/', $segment)) {
+                if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
+                    continue;
+                }
                 $normalizedSegments[] = '{param' . $paramIndex++ . '}';
             } elseif (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
+                if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
+                    continue;
+                }
                 $normalizedSegments[] = '{param' . $paramIndex++ . '}';
             } else {
                 $normalizedSegments[] = self::encodeStaticSegment($segment);
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index af460eaa21..d2dd700224 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -268,6 +268,26 @@ public function testWordPressMultipleGroups()
         $this->assertSame('/{param1}/{param2}', $result);
     }
 
+    public function testWordPressOptionalGroupAbsent()
+    {
+        // Optional second segment not present in URL — must not emit phantom {param2}
+        $result = RouteNormalizer::normalizeFromWordPress('^([^/]+)(?:/([0-9]+))?/?$', 'simple');
+        $this->assertSame('/{param1}', $result);
+    }
+
+    public function testWordPressOptionalGroupPresent()
+    {
+        $result = RouteNormalizer::normalizeFromWordPress('^([^/]+)(?:/([0-9]+))?/?$', 'simple/123');
+        $this->assertSame('/{param1}/{param2}', $result);
+    }
+
+    public function testWordPressOptionalGroupNoUrlPath()
+    {
+        // Without URL path, fall back to emitting all groups (backward-compatible)
+        $result = RouteNormalizer::normalizeFromWordPress('^([^/]+)(?:/([0-9]+))?/?$');
+        $this->assertSame('/{param1}/{param2}', $result);
+    }
+
     public function testWordPressRootRule()
     {
         $result = RouteNormalizer::normalizeFromWordPress('^/?$');

From fc4d005c1cb13dac25c25b5fb5af8f7ec968d82a Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 13:19:31 +0200
Subject: [PATCH 12/54] Fix pipeline

---
 src/DDTrace/Util/RouteNormalizer.php | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 666e097bea..81c0d30bdd 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -258,9 +258,10 @@ private static function normalizeBraceRoute(
             $route = self::expandSquareBracketOptionals($route, $matchedParams);
         }
 
-        // Strip inline constraints before splitting so that a '/' inside a
-        // constraint (e.g. Slim's {name:[^/]+}) does not break the segment split.
-        $route = preg_replace('/\{([a-zA-Z_][a-zA-Z0-9_]*)[^}]*\}/', '{$1}', $route);
+        // Strip inline constraints (e.g. Slim's {name:[^/]+} → {name}) before
+        // splitting so that a '/' inside a constraint does not break the segment
+        // split. The optional marker '?' is preserved: {name?:[0-9]+} → {name?}.
+        $route = preg_replace('/\{([a-zA-Z_][a-zA-Z0-9_]*(\?)?):([^}]*)\}/', '{$1}', $route);
 
         $raw = ltrim($route, '/');
         $parts = explode('/', $raw);

From 9986ed4049ca737e9721effba7e2f33d3808ef47 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 13:39:37 +0200
Subject: [PATCH 13/54] Fix pipeline

---
 .../Integrations/CodeIgniter/V2/CodeIgniterIntegration.php  | 6 ++++--
 ...rios_callbacks_test.test_scenario_get_return_string.json | 2 +-
 ...ios_callbacks_test.test_scenario_get_with_exception.json | 2 +-
 ...cenarios_callbacks_test.test_scenario_get_with_view.json | 2 +-
 ...mmon_scenarios_test.test_scenario_get_return_string.json | 2 +-
 ...mon_scenarios_test.test_scenario_get_with_exception.json | 2 +-
 ...8.common_scenarios_test.test_scenario_get_with_view.json | 2 +-
 ...rios_callbacks_test.test_scenario_get_return_string.json | 2 +-
 ...ios_callbacks_test.test_scenario_get_with_exception.json | 2 +-
 ...cenarios_callbacks_test.test_scenario_get_with_view.json | 2 +-
 ...mmon_scenarios_test.test_scenario_get_return_string.json | 2 +-
 ...mon_scenarios_test.test_scenario_get_with_exception.json | 2 +-
 ...5.common_scenarios_test.test_scenario_get_with_view.json | 2 +-
 ...rios_callbacks_test.test_scenario_get_return_string.json | 2 +-
 ...ios_callbacks_test.test_scenario_get_with_exception.json | 2 +-
 ...cenarios_callbacks_test.test_scenario_get_with_view.json | 2 +-
 ...mmon_scenarios_test.test_scenario_get_return_string.json | 2 +-
 ...mon_scenarios_test.test_scenario_get_with_exception.json | 2 +-
 ...9.common_scenarios_test.test_scenario_get_with_view.json | 2 +-
 ...rios_callbacks_test.test_scenario_get_return_string.json | 2 +-
 ...ios_callbacks_test.test_scenario_get_with_exception.json | 2 +-
 ...cenarios_callbacks_test.test_scenario_get_with_view.json | 2 +-
 ...mmon_scenarios_test.test_scenario_get_return_string.json | 2 +-
 ...mon_scenarios_test.test_scenario_get_with_exception.json | 2 +-
 ...1.common_scenarios_test.test_scenario_get_with_view.json | 2 +-
 25 files changed, 28 insertions(+), 26 deletions(-)

diff --git a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
index d6a71441f0..8b1b4ad6c0 100644
--- a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
+++ b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
@@ -259,7 +259,9 @@ private static function setHttpRoute($router, $rootSpan) {
         // If we got this far it means we didn't encounter a
         // matching route so we'll set the site default route
         $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
-        // $uri is the concrete request path here, not a route template, so
-        // APPSEC_NORMALIZED_ROUTE is not set to avoid emitting real parameter values.
+        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($uri);
+        if ($normalizedRoute !== null) {
+            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+        }
     }
 }
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 4a0424e5fc..807423f1bb 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 1cd0231837..d52a3da5ef 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index 74b6b4c2b0..56709760ea 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "(.?.+?)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
index 81014c33ef..04857a7ad7 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
index 40cddd8117..d03c59fa4b 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
index 778f8d9209..0aed57bd0b 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "(.?.+?)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 0c1c4d7447..54ceed8702 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index d72ec1acfd..dab6d17b85 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index cb7425d421..ddbfe19200 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
index 2d967a4883..97475b3c3e 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
index b283c6044c..672fe1ef8f 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
index 0568c99e74..0d0e03ec26 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 46e6fbaa20..99517450a9 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index bd2e2440b1..10805214ae 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index f8cf650696..54424a79ca 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
index 643b28cd51..b1542c0338 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
index abbd529ddf..dadb6830bc 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
index c7c1aa69e1..67e6a278f1 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 20ca8883a6..0b9ee6a9b6 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 75cb2133a2..3848d91ec6 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index 1fad3089c0..f4e388bcd0 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
index 55bd806fdb..6af081bf5b 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
index d20cc4a0e2..0c960dd3fc 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,7 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
index 2c0aced29d..02a24be7bb 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,7 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}/{param2}",
+      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",

From 4e5ef082bc2d5233eb80bb088c7428ce6624798d Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 15:31:08 +0200
Subject: [PATCH 14/54] Fix wordpress

---
 src/DDTrace/Util/RouteNormalizer.php          | 58 ++++++++++++++++---
 .../Util/Normalizer/RouteNormalizerTest.php   |  8 +++
 2 files changed, 57 insertions(+), 9 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 81c0d30bdd..2aa4adb72b 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -176,16 +176,25 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
                 continue;
             }
 
-            if (preg_match('/^\([^)]+\)$/', $segment)) {
-                if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
-                    continue;
-                }
-                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
-            } elseif (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
-                if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
-                    continue;
+            if (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
+                $groupCount = self::countCaptureGroups($segment);
+                if ($groupCount === 0) {
+                    if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
+                        continue;
+                    }
+                    $normalizedSegments[] = '{param' . $paramIndex++ . '}';
+                } else {
+                    $params = [];
+                    for ($j = 0; $j < $groupCount; $j++) {
+                        if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
+                            break;
+                        }
+                        $params[] = 'param' . $paramIndex++;
+                    }
+                    if (!empty($params)) {
+                        $normalizedSegments[] = '{' . implode('+', $params) . '}';
+                    }
                 }
-                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
             } else {
                 $normalizedSegments[] = self::encodeStaticSegment($segment);
             }
@@ -232,6 +241,37 @@ private static function splitRegexBySlash(string $str): array
         return $segments;
     }
 
+    /**
+     * Count capturing groups in a regex segment, ignoring character classes and non-capturing groups.
+     */
+    private static function countCaptureGroups(string $segment): int
+    {
+        $count = 0;
+        $len = strlen($segment);
+        $inClass = false;
+
+        for ($i = 0; $i < $len; $i++) {
+            $c = $segment[$i];
+
+            if ($c === '\\' && $i + 1 < $len) {
+                $i++;
+                continue;
+            }
+
+            if ($c === '[' && !$inClass) {
+                $inClass = true;
+            } elseif ($c === ']' && $inClass) {
+                $inClass = false;
+            } elseif ($c === '(' && !$inClass) {
+                if ($i + 1 >= $len || $segment[$i + 1] !== '?') {
+                    $count++;
+                }
+            }
+        }
+
+        return $count;
+    }
+
     /**
      * Normalize a route that uses {param} notation.
      *
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index d2dd700224..6ca71b563c 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -294,6 +294,14 @@ public function testWordPressRootRule()
         $this->assertSame('/', $result);
     }
 
+    public function testWordPressMultipleCaptureGroupsInOneSegment()
+    {
+        // Two capture groups in the same slash-separated segment → combined with +
+        // The static prefix "post-" is dropped as the whole mixed segment is treated as dynamic
+        $result = RouteNormalizer::normalizeFromWordPress('^post-([^/]+)-([0-9]+)/?$');
+        $this->assertSame('/{param1+param2}', $result);
+    }
+
     // RFC examples
 
     public function testRfcExampleFastApi()

From 62e2a8077c0f1d1260015bb1dc413a5418163010 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 15:35:59 +0200
Subject: [PATCH 15/54] Improve pr

---
 src/DDTrace/Util/RouteNormalizer.php          | 30 ++++++----
 .../Util/Normalizer/RouteNormalizerTest.php   | 55 +++++++++++++++++++
 2 files changed, 75 insertions(+), 10 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 2aa4adb72b..e41be99edc 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -353,12 +353,16 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
             $name = trim($raw);
 
             if ($isOptional && !array_key_exists($name, $matchedParams)) {
-                return null;
+                continue;
             }
 
             $paramNames[] = self::encodeParamName($name);
         }
 
+        if (empty($paramNames)) {
+            return null;
+        }
+
         if (count($paramNames) === 1) {
             return '{' . $paramNames[0] . '}';
         }
@@ -424,25 +428,31 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                     preg_match_all($pattern, $inner, $pm);
                     $innerParams = $pm[1];
 
+                    // All params in the section must be present in matched params.
                     foreach ($innerParams as $param) {
                         if (!array_key_exists($param, $matchedParams)) {
-                            continue;
+                            return '';
                         }
-                        if ($urlPath !== null) {
+                    }
+
+                    if ($urlPath !== null && !empty($innerParams)) {
+                        // Substitute every param value before checking the URL so that
+                        // multi-param sections like [/:year/:month] are found correctly.
+                        $innerWithValues = $inner;
+                        foreach ($innerParams as $param) {
                             $value = (string)$matchedParams[$param];
-                            $innerWithValue = preg_replace(
+                            $innerWithValues = preg_replace(
                                 '/' . preg_quote($paramPrefix . $param, '/') . '/',
                                 $value,
-                                $inner
+                                $innerWithValues
                             );
-                            if (strpos($urlPath, $innerWithValue) === false) {
-                                continue;
-                            }
                         }
-                        return $inner;
+                        if (strpos($urlPath, $innerWithValues) === false) {
+                            return '';
+                        }
                     }
 
-                    return '';
+                    return $inner;
                 },
                 $template
             );
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 6ca71b563c..724f88ff97 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -84,6 +84,19 @@ public function testLaravelMixedSegmentOptionalFormat()
         $this->assertSame('/posts/{id}', $result);
     }
 
+    public function testLaravelRequiredParamBesideAbsentOptional()
+    {
+        // {name} is required; {ext?} is absent — must keep {name}, not drop the whole segment
+        $result = RouteNormalizer::normalizeFromLaravel('/files/{name}.{ext?}', ['name' => 'foo']);
+        $this->assertSame('/files/{name}', $result);
+    }
+
+    public function testLaravelRequiredParamBesideAbsentOptionalBothPresent()
+    {
+        $result = RouteNormalizer::normalizeFromLaravel('/files/{name}.{ext?}', ['name' => 'foo', 'ext' => 'txt']);
+        $this->assertSame('/files/{name+ext}', $result);
+    }
+
     public function testLaravelDeeperRoute()
     {
         $result = RouteNormalizer::normalizeFromLaravel('/dashboard/shared_widget_update/{id}/{widget_id}');
@@ -171,6 +184,48 @@ public function testLaminasOptionalAbsent()
         $this->assertSame('/users/{id}', $result);
     }
 
+    public function testLaminasMultiParamOptionalPresent()
+    {
+        // Both params in the section present and appear in the URL → expand
+        $result = RouteNormalizer::normalizeFromLaminas(
+            '/archive[/:year/:month]',
+            ['year' => '2024', 'month' => '08'],
+            '/archive/2024/08'
+        );
+        $this->assertSame('/archive/{year}/{month}', $result);
+    }
+
+    public function testLaminasMultiParamOptionalAbsent()
+    {
+        // Both params injected by middleware but absent from URL → do not expand
+        $result = RouteNormalizer::normalizeFromLaminas(
+            '/archive[/:year/:month]',
+            ['year' => '2024', 'month' => '08'],
+            '/archive'
+        );
+        $this->assertSame('/archive', $result);
+    }
+
+    public function testLaminasNestedOptionalBothPresent()
+    {
+        $result = RouteNormalizer::normalizeFromLaminas(
+            '/foo[/:bar[/:baz]]',
+            ['bar' => 'a', 'baz' => 'b'],
+            '/foo/a/b'
+        );
+        $this->assertSame('/foo/{bar}/{baz}', $result);
+    }
+
+    public function testLaminasNestedOptionalOnlyOuterPresent()
+    {
+        $result = RouteNormalizer::normalizeFromLaminas(
+            '/foo[/:bar[/:baz]]',
+            ['bar' => 'a'],
+            '/foo/a'
+        );
+        $this->assertSame('/foo/{bar}', $result);
+    }
+
     public function testLaminasLiteralRoute()
     {
         $this->assertSame('/dump-request', RouteNormalizer::normalizeFromLaminas('/dump-request'));

From 089cfa9bb51b11c906c83c734389d4d1d1a10f7d Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 16:01:24 +0200
Subject: [PATCH 16/54] Fix PR

---
 .../Integrations/Slim/SlimIntegration.php     |  6 +-
 .../Symfony/SymfonyIntegration.php            | 35 +++++++++++-
 src/DDTrace/Util/RouteNormalizer.php          | 48 ++++++++++++----
 .../Util/Normalizer/RouteNormalizerTest.php   | 56 +++++++++++++++++++
 4 files changed, 131 insertions(+), 14 deletions(-)

diff --git a/src/DDTrace/Integrations/Slim/SlimIntegration.php b/src/DDTrace/Integrations/Slim/SlimIntegration.php
index df2cff2ef1..c795d846ce 100644
--- a/src/DDTrace/Integrations/Slim/SlimIntegration.php
+++ b/src/DDTrace/Integrations/Slim/SlimIntegration.php
@@ -145,7 +145,8 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                             $matchedParams = method_exists($route, 'getArguments') ? ($route->getArguments() ?? []) : [];
                             $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
                             if ($pattern !== '') {
-                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams);
+                                $urlPath = $request->getUri()->getPath();
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
                                 if ($normalizedRoute !== null) {
                                     $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                                 }
@@ -158,7 +159,8 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                         $matchedParams = isset($args[3]) && is_array($args[3]) ? $args[3] : [];
                         $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
                         if ($pattern !== '') {
-                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams);
+                            $urlPath = $request->getUri()->getPath();
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
                             if ($normalizedRoute !== null) {
                                 $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index fb90de1e0e..ed0b38c527 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -456,7 +456,8 @@ static function() {
 
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
-                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path);
+                    $matchedParams = self::inferSymfonyRouteParams($path, $request->getPathInfo());
+                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path, $matchedParams);
                     if ($normalizedRoute !== null) {
                         $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
@@ -773,4 +774,36 @@ public static function injectActionInfo($event, $eventName, SpanData $requestSpa
 
         return true;
     }
+
+    /**
+     * Walk the path template and URL path together to determine which {param}
+     * placeholders were actually present in the URL (vs filled from route defaults).
+     * Each template segment is either static text or a single {param}; trailing
+     * params with no corresponding URL segment are considered absent.
+     *
+     * @return array Map of param name → URL value for params present in the URL
+     */
+    private static function inferSymfonyRouteParams(string $template, string $urlPath): array
+    {
+        $templateSegments = array_values(array_filter(explode('/', $template)));
+        $urlSegments      = array_values(array_filter(explode('/', $urlPath)));
+
+        $matched = [];
+        $urlIdx  = 0;
+
+        foreach ($templateSegments as $seg) {
+            if (preg_match('/^\{([a-zA-Z_][a-zA-Z0-9_]*)\}$/', $seg, $m)) {
+                if ($urlIdx < count($urlSegments)) {
+                    $matched[$m[1]] = $urlSegments[$urlIdx];
+                    $urlIdx++;
+                }
+                // else: param is beyond end of URL → absent (default-filled)
+            } else {
+                // Static segment — always advance the URL position
+                $urlIdx++;
+            }
+        }
+
+        return $matched;
+    }
 }
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index e41be99edc..bfdac145bf 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -20,23 +20,38 @@ public static function normalizeFromLaravel(string $routeUri, array $matchedPara
     /**
      * Normalize a Slim route pattern.
      *
-     * @param string $pattern      Pattern from $route->getPattern(), e.g. "/users/{id:[0-9]+}"
-     * @param array  $matchedParams Matched params from $route->getArguments(); resolves optionals
+     * @param string      $pattern       Pattern from $route->getPattern(), e.g. "/users/{id:[0-9]+}"
+     * @param array       $matchedParams Matched params from $route->getArguments(); resolves optionals
+     * @param string|null $urlPath       Actual request path; used to resolve static-only optional
+     *                                   sections like [.json] that have no placeholder param
      * @return string|null
      */
-    public static function normalizeFromSlim(string $pattern, array $matchedParams = [])
+    public static function normalizeFromSlim(string $pattern, array $matchedParams = [], ?string $urlPath = null)
     {
-        return self::normalizeBraceRoute($pattern, $matchedParams, true);
+        return self::normalizeBraceRoute($pattern, $matchedParams, true, $urlPath);
     }
 
     /**
      * Normalize a Symfony route path.
      *
-     * @param string $path Path template, e.g. "/users/{id}"
+     * @param string     $path          Path template, e.g. "/users/{id}"
+     * @param array|null $matchedParams Params actually present in the URL path (not including
+     *                                  route defaults); when provided, absent params are dropped
      * @return string|null
      */
-    public static function normalizeFromSymfony(string $path)
+    public static function normalizeFromSymfony(string $path, ?array $matchedParams = null)
     {
+        if ($matchedParams !== null) {
+            // Mark params absent from the URL as optional so normalizeBraceSegment drops them.
+            $path = preg_replace_callback(
+                '/\{([a-zA-Z_][a-zA-Z0-9_]*)\}/',
+                static function ($m) use ($matchedParams) {
+                    return array_key_exists($m[1], $matchedParams) ? $m[0] : '{' . $m[1] . '?}';
+                },
+                $path
+            );
+            return self::normalizeBraceRoute($path, $matchedParams);
+        }
         return self::normalizeBraceRoute($path, []);
     }
 
@@ -275,12 +290,14 @@ private static function countCaptureGroups(string $segment): int
     /**
      * Normalize a route that uses {param} notation.
      *
-     * @param bool $expandSquare When true, expand Slim-style [...] optional sections
+     * @param bool        $expandSquare When true, expand Slim-style [...] optional sections
+     * @param string|null $urlPath      Actual request path; forwarded to expandSquareBracketOptionals
      */
     private static function normalizeBraceRoute(
         string $route,
         array $matchedParams,
-        bool $expandSquare = false
+        bool $expandSquare = false,
+        ?string $urlPath = null
     ) {
         $route = trim($route);
         if ($route === '' || $route === '/') {
@@ -295,7 +312,7 @@ private static function normalizeBraceRoute(
         }
 
         if ($expandSquare) {
-            $route = self::expandSquareBracketOptionals($route, $matchedParams);
+            $route = self::expandSquareBracketOptionals($route, $matchedParams, $urlPath);
         }
 
         // Strip inline constraints (e.g. Slim's {name:[^/]+} → {name}) before
@@ -372,20 +389,29 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
 
     /**
      * Expand Slim-style optional sections [...] based on matched params.
+     *
+     * For sections that contain no placeholder (e.g. [.json]), $urlPath is used
+     * to decide whether the literal text was part of the request; without it the
+     * section is always kept (backward-compatible behaviour).
      */
-    private static function expandSquareBracketOptionals(string $route, array $matchedParams): string
+    private static function expandSquareBracketOptionals(string $route, array $matchedParams, ?string $urlPath = null): string
     {
         $prev = null;
         while ($prev !== $route) {
             $prev = $route;
             $route = preg_replace_callback(
                 '/\[([^\[\]]*)\]/',
-                function ($m) use ($matchedParams) {
+                function ($m) use ($matchedParams, $urlPath) {
                     $inner = $m[1];
                     preg_match_all('/\{([^}?:]+)[?:]?[^}]*\}/', $inner, $pm);
                     $innerParams = $pm[1];
 
                     if (empty($innerParams)) {
+                        // Static-only section (e.g. [.json]): include only when the
+                        // literal text actually appears in the request path.
+                        if ($urlPath !== null) {
+                            return strpos($urlPath, $inner) !== false ? $inner : '';
+                        }
                         return $inner;
                     }
 
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 724f88ff97..b4d6753b66 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -146,6 +146,27 @@ public function testSlimCatchAll()
         $this->assertSame('/files/{file}', RouteNormalizer::normalizeFromSlim('/files/{file:.+}'));
     }
 
+    public function testSlimStaticOptionalSectionPresent()
+    {
+        // /feed[.json] requested as /feed.json → .json section included
+        $result = RouteNormalizer::normalizeFromSlim('/feed[.json]', [], '/feed.json');
+        $this->assertSame('/feed.json', $result);
+    }
+
+    public function testSlimStaticOptionalSectionAbsent()
+    {
+        // /feed[.json] requested as /feed → .json section absent
+        $result = RouteNormalizer::normalizeFromSlim('/feed[.json]', [], '/feed');
+        $this->assertSame('/feed', $result);
+    }
+
+    public function testSlimStaticOptionalSectionNoUrlPath()
+    {
+        // Without URL path, backward-compatible: keep the section
+        $result = RouteNormalizer::normalizeFromSlim('/feed[.json]', []);
+        $this->assertSame('/feed.json', $result);
+    }
+
     // normalizeFromSymfony
 
     public function testSymfonySimpleRoute()
@@ -165,6 +186,41 @@ public function testSymfonyStaticOnlyRoute()
         $this->assertSame('/dump-request', RouteNormalizer::normalizeFromSymfony('/dump-request'));
     }
 
+    public function testSymfonyOptionalParamAbsent()
+    {
+        // /blog/{page} requested as /blog — page has a default and was not in the URL
+        $result = RouteNormalizer::normalizeFromSymfony('/blog/{page}', []);
+        $this->assertSame('/blog', $result);
+    }
+
+    public function testSymfonyOptionalParamPresent()
+    {
+        // /blog/{page} requested as /blog/2 — page was in the URL
+        $result = RouteNormalizer::normalizeFromSymfony('/blog/{page}', ['page' => '2']);
+        $this->assertSame('/blog/{page}', $result);
+    }
+
+    public function testSymfonyRequiredParamsAlwaysKept()
+    {
+        // All params present — nothing dropped
+        $result = RouteNormalizer::normalizeFromSymfony('/users/{id}/posts/{post_id}', ['id' => '1', 'post_id' => '5']);
+        $this->assertSame('/users/{id}/posts/{post_id}', $result);
+    }
+
+    public function testSymfonyTrailingOptionalAbsent()
+    {
+        // /users/{id}/posts/{post_id} with only id in URL — post_id absent
+        $result = RouteNormalizer::normalizeFromSymfony('/users/{id}/posts/{post_id}', ['id' => '1']);
+        $this->assertSame('/users/{id}/posts', $result);
+    }
+
+    public function testSymfonyNoMatchedParamsArgKeepsAll()
+    {
+        // null matchedParams → old behaviour, no params dropped
+        $result = RouteNormalizer::normalizeFromSymfony('/blog/{page}');
+        $this->assertSame('/blog/{page}', $result);
+    }
+
     // normalizeFromLaminas
 
     public function testLaminasSimpleColon()

From 4409a330483eb1cf3efbff9e216abdc2b9eb63fc Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Mon, 17 Aug 2026 16:06:22 +0200
Subject: [PATCH 17/54] Fix laminas

---
 src/DDTrace/Util/RouteNormalizer.php               | 11 +++++++++++
 tests/Unit/Util/Normalizer/RouteNormalizerTest.php |  7 +++++++
 2 files changed, 18 insertions(+)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index bfdac145bf..607c173cfb 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -73,7 +73,9 @@ public static function normalizeFromLaminas(string $template, array $matchedPara
     {
         $expanded = self::expandBracketOptionals($template, $matchedParams, ':', $urlPath);
         $expanded = preg_replace('#/\*$#', '/{param1}', $expanded);
+        // Segment routes use :param; Regex routes use %param% (spec format) — handle both.
         $braceFormat = self::colonParamsToBraces($expanded);
+        $braceFormat = self::percentParamsToBraces($braceFormat);
         return self::normalizeBraceRoute($braceFormat, $matchedParams);
     }
 
@@ -501,6 +503,15 @@ static function ($m) {
         );
     }
 
+    /**
+     * Convert Laminas Regex route spec %param% notation to {param} brace notation.
+     * Regex routes store their spec as "/path/%id%/%name%" for URL generation.
+     */
+    private static function percentParamsToBraces(string $template): string
+    {
+        return preg_replace('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', '{$1}', $template);
+    }
+
     /**
      * Convert CakePHP route template syntax to brace notation.
      */
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index b4d6753b66..575dcc4d38 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -282,6 +282,13 @@ public function testLaminasNestedOptionalOnlyOuterPresent()
         $this->assertSame('/foo/{bar}', $result);
     }
 
+    public function testLaminasRegexRouteSpec()
+    {
+        // Laminas\Router\Http\Regex uses %param% spec format for URL generation
+        $this->assertSame('/blog/{id}', RouteNormalizer::normalizeFromLaminas('/blog/%id%'));
+        $this->assertSame('/user/{id}/{name}', RouteNormalizer::normalizeFromLaminas('/user/%id%/%name%'));
+    }
+
     public function testLaminasLiteralRoute()
     {
         $this->assertSame('/dump-request', RouteNormalizer::normalizeFromLaminas('/dump-request'));

From b54daeb28aeb154dda6b162861c444c53ea6a06a Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 18 Aug 2026 12:20:31 +0200
Subject: [PATCH 18/54] Implement a route caching system

---
 .../CakePHP/CakePHPIntegration.php            | 11 +++-
 .../CodeIgniter/V2/CodeIgniterIntegration.php | 29 +++++----
 .../Laminas/LaminasIntegration.php            | 13 +++-
 .../Laravel/LaravelIntegration.php            | 12 +++-
 .../Symfony/SymfonyIntegration.php            | 28 ++++++---
 .../Integrations/Yii/YiiIntegration.php       | 11 +++-
 .../ext/routing_cache/cache_lru_eviction.phpt | 31 ++++++++++
 .../cache_miss_returns_false.phpt             | 14 +++++
 .../ext/routing_cache/cache_set_and_get.phpt  | 21 +++++++
 .../cache_update_existing_key.phpt            | 15 +++++
 tracer/ddtrace.c                              |  3 +
 tracer/ddtrace_arginfo.h                      | 13 ++++
 tracer/routing_cache.c                        | 59 +++++++++++++++++++
 tracer/routing_cache.h                        | 14 +++++
 14 files changed, 244 insertions(+), 30 deletions(-)
 create mode 100644 tests/ext/routing_cache/cache_lru_eviction.phpt
 create mode 100644 tests/ext/routing_cache/cache_miss_returns_false.phpt
 create mode 100644 tests/ext/routing_cache/cache_set_and_get.phpt
 create mode 100644 tests/ext/routing_cache/cache_update_existing_key.phpt
 create mode 100644 tracer/routing_cache.c
 create mode 100644 tracer/routing_cache.h

diff --git a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
index 2d416f19ea..9e9f171ba5 100644
--- a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
+++ b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
@@ -73,8 +73,15 @@ public static function init(): int
             if ($rootSpan !== null) {
                 $template = $app->template;
                 $rootSpan->meta[Tag::HTTP_ROUTE] = $template;
-                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCakePHP($template);
-                if ($normalizedRoute !== null) {
+                $cacheKey = $template;
+                $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+                if ($normalizedRoute === false) {
+                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCakePHP($template);
+                    if ($normalizedRoute !== null) {
+                        \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                    }
+                }
+                if ($normalizedRoute !== null && $normalizedRoute !== false) {
                     $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                 }
             }
diff --git a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
index 8b1b4ad6c0..4e5cb94ea2 100644
--- a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
+++ b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
@@ -222,6 +222,20 @@ function (SpanData $span, $args, $retval, $ex) use ($adapter, $service) {
     /*
      * Replicate CodeIgniter's route parsing, as matching key is never stored or returned in the framework.
      */
+    private static function setNormalizedRoute($rootSpan, string $pattern): void {
+        $cacheKey = $pattern;
+        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+        if ($normalizedRoute === false) {
+            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($pattern);
+            if ($normalizedRoute !== null) {
+                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+            }
+        }
+        if ($normalizedRoute !== null && $normalizedRoute !== false) {
+            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+        }
+    }
+
     private static function setHttpRoute($router, $rootSpan) {
         // Turn the segment array into a URI string
         $uri = implode('/', $router->uri->segments);
@@ -230,10 +244,7 @@ private static function setHttpRoute($router, $rootSpan) {
         if (isset($router->routes[$uri]))
         {
             $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
-            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($uri);
-            if ($normalizedRoute !== null) {
-                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-            }
+            self::setNormalizedRoute($rootSpan, $uri);
             return;
         }
 
@@ -248,10 +259,7 @@ private static function setHttpRoute($router, $rootSpan) {
             if (preg_match('#^'.$key.'$#', $uri))
             {
                 $rootSpan->meta[Tag::HTTP_ROUTE] = $origKey;
-                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($origKey);
-                if ($normalizedRoute !== null) {
-                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                }
+                self::setNormalizedRoute($rootSpan, $origKey);
                 return;
             }
         }
@@ -259,9 +267,6 @@ private static function setHttpRoute($router, $rootSpan) {
         // If we got this far it means we didn't encounter a
         // matching route so we'll set the site default route
         $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
-        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($uri);
-        if ($normalizedRoute !== null) {
-            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-        }
+        self::setNormalizedRoute($rootSpan, $uri);
     }
 }
diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index fb46b106e9..6628a8843c 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -279,8 +279,17 @@ static function (SpanData $span) use ($controller, $action) {
                     && $routeName !== null
                     && $routeName !== ''
                 ) {
-                    $httpRoute = LaminasIntegration::httpRouteTemplateFromNamedRouteStack($this, (string) $routeName);
-                    if ($httpRoute !== null && $httpRoute !== '') {
+                    $cacheKey = (string) $routeName;
+                    $cachedRoute = \DDTrace\routing_cache_get($cacheKey);
+                    if ($cachedRoute !== false) {
+                        $httpRoute = $cachedRoute;
+                    } else {
+                        $httpRoute = LaminasIntegration::httpRouteTemplateFromNamedRouteStack($this, (string) $routeName);
+                        if ($httpRoute !== null && $httpRoute !== '') {
+                            \DDTrace\routing_cache_set($cacheKey, $httpRoute);
+                        }
+                    }
+                    if ($httpRoute !== null && $httpRoute !== false && $httpRoute !== '') {
                         $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
                         $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
                         $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index 59a2d9a5eb..4c8fb093e0 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -141,9 +141,15 @@ static function ($This, $scope, $args, $route) {
                 if (\method_exists($route, 'uri')) {
                     $httpRoute = $route->uri();
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
-                    $matchedParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
-                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaravel($httpRoute, $matchedParams);
-                    if ($normalizedRoute !== null) {
+                    $normalizedRoute = \DDTrace\routing_cache_get($httpRoute);
+                    if ($normalizedRoute === false) {
+                        $matchedParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
+                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaravel($httpRoute, $matchedParams);
+                        if ($normalizedRoute !== null) {
+                            \DDTrace\routing_cache_set($httpRoute, $normalizedRoute);
+                        }
+                    }
+                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
                         $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
                 }
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index ed0b38c527..471e40d6be 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -442,15 +442,25 @@ static function() {
                     return;
                 }
 
-                /** @var ContainerInterface $container */
-                $container = self::$kernel->getContainer();
-                $path = EndpointCatalog::pathForRoute($route_name, $container);
-
-                // Try with locale suffix (Symfony i18n routing convention)
-                if ($path === null) {
-                    $locale = $request->attributes->get('_locale');
-                    if ($locale !== null) {
-                        $path = EndpointCatalog::pathForRoute($route_name . '.' . $locale, $container);
+                $cacheKey = $route_name;
+                $cachedPath = \DDTrace\routing_cache_get($cacheKey);
+                if ($cachedPath !== false) {
+                    $path = $cachedPath;
+                } else {
+                    /** @var ContainerInterface $container */
+                    $container = self::$kernel->getContainer();
+                    $path = EndpointCatalog::pathForRoute($route_name, $container);
+
+                    // Try with locale suffix (Symfony i18n routing convention)
+                    if ($path === null) {
+                        $locale = $request->attributes->get('_locale');
+                        if ($locale !== null) {
+                            $path = EndpointCatalog::pathForRoute($route_name . '.' . $locale, $container);
+                        }
+                    }
+
+                    if ($path !== null) {
+                        \DDTrace\routing_cache_set($cacheKey, $path);
                     }
                 }
 
diff --git a/src/DDTrace/Integrations/Yii/YiiIntegration.php b/src/DDTrace/Integrations/Yii/YiiIntegration.php
index 8acc12e904..32269f4928 100644
--- a/src/DDTrace/Integrations/Yii/YiiIntegration.php
+++ b/src/DDTrace/Integrations/Yii/YiiIntegration.php
@@ -156,8 +156,15 @@ function (SpanData $span, $args) use (&$firstController) {
 
                     $rootSpan->meta['app.route.path'] = $routePath;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $routePath;
-                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromYii($routePath);
-                    if ($normalizedRoute !== null) {
+                    $cacheKey = $routePath;
+                    $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+                    if ($normalizedRoute === false) {
+                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromYii($routePath);
+                        if ($normalizedRoute !== null) {
+                            \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                        }
+                    }
+                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
                         $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
 
diff --git a/tests/ext/routing_cache/cache_lru_eviction.phpt b/tests/ext/routing_cache/cache_lru_eviction.phpt
new file mode 100644
index 0000000000..597049bfb5
--- /dev/null
+++ b/tests/ext/routing_cache/cache_lru_eviction.phpt
@@ -0,0 +1,31 @@
+--TEST--
+DDTrace\routing_cache evicts least-recently-used entry when capacity (500) is exceeded
+--FILE--
+<?php
+
+// Fill the cache to capacity (500 entries)
+for ($i = 0; $i < 500; $i++) {
+    DDTrace\routing_cache_set("key$i", "value$i");
+}
+
+// key0 is the LRU — access key1..key499 to keep them hot, leaving key0 as LRU
+// Actually they were inserted oldest-first, so key0 is at tail (LRU).
+// Verify key0 is still present before eviction
+var_dump(DDTrace\routing_cache_get('key0'));
+
+// Access key0 to move it to MRU position so key1 becomes LRU
+DDTrace\routing_cache_get('key0');
+
+// Insert one more entry; key1 should be evicted (it's now LRU)
+DDTrace\routing_cache_set('key500', 'value500');
+
+var_dump(DDTrace\routing_cache_get('key1'));   // evicted
+var_dump(DDTrace\routing_cache_get('key0'));   // still present (was accessed)
+var_dump(DDTrace\routing_cache_get('key500')); // newly inserted
+
+?>
+--EXPECT--
+string(6) "value0"
+bool(false)
+string(6) "value0"
+string(8) "value500"
diff --git a/tests/ext/routing_cache/cache_miss_returns_false.phpt b/tests/ext/routing_cache/cache_miss_returns_false.phpt
new file mode 100644
index 0000000000..1138b0ad30
--- /dev/null
+++ b/tests/ext/routing_cache/cache_miss_returns_false.phpt
@@ -0,0 +1,14 @@
+--TEST--
+DDTrace\routing_cache_get returns false on cache miss
+--FILE--
+<?php
+
+var_dump(DDTrace\routing_cache_get('nonexistent'));
+var_dump(DDTrace\routing_cache_get(''));
+var_dump(DDTrace\routing_cache_get('laminas:/api/users/{id}'));
+
+?>
+--EXPECT--
+bool(false)
+bool(false)
+bool(false)
diff --git a/tests/ext/routing_cache/cache_set_and_get.phpt b/tests/ext/routing_cache/cache_set_and_get.phpt
new file mode 100644
index 0000000000..0f75a2f4ab
--- /dev/null
+++ b/tests/ext/routing_cache/cache_set_and_get.phpt
@@ -0,0 +1,21 @@
+--TEST--
+DDTrace\routing_cache_set stores and DDTrace\routing_cache_get retrieves values
+--FILE--
+<?php
+
+DDTrace\routing_cache_set('laminas:/api/users/{id}', '/api/users/{id}');
+var_dump(DDTrace\routing_cache_get('laminas:/api/users/{id}'));
+
+DDTrace\routing_cache_set('symfony:/blog/{slug}', '/blog/{slug}');
+var_dump(DDTrace\routing_cache_get('symfony:/blog/{slug}'));
+
+// keys are isolated
+var_dump(DDTrace\routing_cache_get('laminas:/api/users/{id}'));
+var_dump(DDTrace\routing_cache_get('other:key'));
+
+?>
+--EXPECT--
+string(15) "/api/users/{id}"
+string(12) "/blog/{slug}"
+string(15) "/api/users/{id}"
+bool(false)
diff --git a/tests/ext/routing_cache/cache_update_existing_key.phpt b/tests/ext/routing_cache/cache_update_existing_key.phpt
new file mode 100644
index 0000000000..c7feb2ec8a
--- /dev/null
+++ b/tests/ext/routing_cache/cache_update_existing_key.phpt
@@ -0,0 +1,15 @@
+--TEST--
+DDTrace\routing_cache_set updates value for existing key
+--FILE--
+<?php
+
+DDTrace\routing_cache_set('mykey', 'first');
+var_dump(DDTrace\routing_cache_get('mykey'));
+
+DDTrace\routing_cache_set('mykey', 'updated');
+var_dump(DDTrace\routing_cache_get('mykey'));
+
+?>
+--EXPECT--
+string(5) "first"
+string(7) "updated"
diff --git a/tracer/ddtrace.c b/tracer/ddtrace.c
index e450008dbd..bd58b68b5a 100644
--- a/tracer/ddtrace.c
+++ b/tracer/ddtrace.c
@@ -1,3 +1,4 @@
+#include "routing_cache.h"
 #include "components-rs/common.h"
 #include "components-rs/sidecar.h"
 #include "zend_API.h"
@@ -373,6 +374,7 @@ void ddtrace_minit_late() {
 
     ddtrace_live_debugger_minit();
     ddtrace_trace_source_minit();
+    ddtrace_routing_cache_minit();
 }
 
 void ddtrace_mshutdown() {
@@ -380,6 +382,7 @@ void ddtrace_mshutdown() {
     zai_hook_mshutdown();
 
     ddtrace_unregister_functions_and_classes();
+    ddtrace_routing_cache_mshutdown();
 
     if (datadog_disable == 1) {
         return;
diff --git a/tracer/ddtrace_arginfo.h b/tracer/ddtrace_arginfo.h
index afa0f62d9f..db27f813c8 100644
--- a/tracer/ddtrace_arginfo.h
+++ b/tracer/ddtrace_arginfo.h
@@ -38,6 +38,15 @@ ZEND_BEGIN_ARG_WITH_RETURN_TYPE_INFO_EX(arginfo_DDTrace_set_user, 0, 1, IS_VOID,
 	ZEND_ARG_TYPE_INFO_WITH_DEFAULT_VALUE(0, propagate, _IS_BOOL, 1, "null")
 ZEND_END_ARG_INFO()
 
+ZEND_BEGIN_ARG_WITH_RETURN_TYPE_MASK_EX(arginfo_DDTrace_routing_cache_get, 0, 1, MAY_BE_STRING|MAY_BE_FALSE)
+	ZEND_ARG_TYPE_INFO(0, key, IS_STRING, 0)
+ZEND_END_ARG_INFO()
+
+ZEND_BEGIN_ARG_WITH_RETURN_TYPE_INFO_EX(arginfo_DDTrace_routing_cache_set, 0, 2, IS_VOID, 0)
+	ZEND_ARG_TYPE_INFO(0, key, IS_STRING, 0)
+	ZEND_ARG_TYPE_INFO(0, value, IS_STRING, 0)
+ZEND_END_ARG_INFO()
+
 ZEND_BEGIN_ARG_WITH_RETURN_TYPE_MASK_EX(arginfo_DDTrace_close_spans_until, 0, 1, MAY_BE_FALSE|MAY_BE_LONG)
 	ZEND_ARG_OBJ_INFO(0, span, DDTrace\\SpanData, 1)
 ZEND_END_ARG_INFO()
@@ -473,6 +482,8 @@ ZEND_FUNCTION(DDTrace_trace_function);
 ZEND_FUNCTION(DDTrace_trace_method);
 ZEND_FUNCTION(dd_untrace);
 ZEND_FUNCTION(dd_trace_synchronous_flush);
+ZEND_FUNCTION(DDTrace_routing_cache_get);
+ZEND_FUNCTION(DDTrace_routing_cache_set);
 ZEND_METHOD(DDTrace_SpanEvent, __construct);
 ZEND_METHOD(DDTrace_SpanEvent, jsonSerialize);
 ZEND_METHOD(DDTrace_ExceptionSpanEvent, __construct);
@@ -549,6 +560,8 @@ static const zend_function_entry ext_functions[] = {
 	ZEND_RAW_FENTRY(ZEND_NS_NAME("DDTrace\\Internal", "flush_ffe_evaluation_metrics"), zif_DDTrace_Internal_flush_ffe_evaluation_metrics, arginfo_DDTrace_Internal_flush_ffe_evaluation_metrics, 0, NULL, NULL)
 	ZEND_RAW_FENTRY(ZEND_NS_NAME("datadog\\appsec\\v2", "track_user_login_success"), zif_datadog_appsec_v2_track_user_login_success, arginfo_datadog_appsec_v2_track_user_login_success, 0, NULL, NULL)
 	ZEND_RAW_FENTRY(ZEND_NS_NAME("datadog\\appsec\\v2", "track_user_login_failure"), zif_datadog_appsec_v2_track_user_login_failure, arginfo_datadog_appsec_v2_track_user_login_failure, 0, NULL, NULL)
+	ZEND_RAW_FENTRY(ZEND_NS_NAME("DDTrace", "routing_cache_get"), zif_DDTrace_routing_cache_get, arginfo_DDTrace_routing_cache_get, 0, NULL, NULL)
+	ZEND_RAW_FENTRY(ZEND_NS_NAME("DDTrace", "routing_cache_set"), zif_DDTrace_routing_cache_set, arginfo_DDTrace_routing_cache_set, 0, NULL, NULL)
 	ZEND_FE(dd_trace_env_config, arginfo_dd_trace_env_config)
 	ZEND_FE(dd_trace_disable_in_request, arginfo_dd_trace_disable_in_request)
 	ZEND_FE(dd_trace_reset, arginfo_dd_trace_reset)
diff --git a/tracer/routing_cache.c b/tracer/routing_cache.c
new file mode 100644
index 0000000000..fe91fbe1ac
--- /dev/null
+++ b/tracer/routing_cache.c
@@ -0,0 +1,59 @@
+#include "routing_cache.h"
+#include "ddtrace.h"
+
+static HashTable ddtrace_rcache;
+
+static void ddtrace_routing_cache_dtor(zval *pz) {
+    zend_string_release_ex((zend_string *)Z_PTR_P(pz), 1);
+}
+
+static void ddtrace_routing_cache_evict_oldest(void) {
+    HashPosition pos;
+    zend_string *key;
+    zend_ulong num_idx;
+
+    zend_hash_internal_pointer_reset_ex(&ddtrace_rcache, &pos);
+    if (zend_hash_get_current_key_type_ex(&ddtrace_rcache, &pos) == HASH_KEY_IS_STRING) {
+        zend_hash_get_current_key_ex(&ddtrace_rcache, &key, &num_idx, &pos);
+        zend_hash_del(&ddtrace_rcache, key);
+    }
+}
+
+void ddtrace_routing_cache_minit(void) {
+    zend_hash_init(&ddtrace_rcache, DDTRACE_ROUTING_CACHE_CAPACITY, NULL, ddtrace_routing_cache_dtor, 1);
+}
+
+void ddtrace_routing_cache_mshutdown(void) {
+    zend_hash_destroy(&ddtrace_rcache);
+}
+
+/* DDTrace\routing_cache_get(string $key): string|false */
+PHP_FUNCTION(DDTrace_routing_cache_get) {
+    zend_string *key;
+    ZEND_PARSE_PARAMETERS_START(1, 1)
+        Z_PARAM_STR(key)
+    ZEND_PARSE_PARAMETERS_END();
+
+    zend_string *value = zend_hash_find_ptr(&ddtrace_rcache, key);
+    if (!value) {
+        RETURN_FALSE;
+    }
+    RETURN_STRINGL(ZSTR_VAL(value), ZSTR_LEN(value));
+}
+
+/* DDTrace\routing_cache_set(string $key, string $value): void */
+PHP_FUNCTION(DDTrace_routing_cache_set) {
+    zend_string *key, *value;
+    ZEND_PARSE_PARAMETERS_START(2, 2)
+        Z_PARAM_STR(key)
+        Z_PARAM_STR(value)
+    ZEND_PARSE_PARAMETERS_END();
+
+    if (zend_hash_num_elements(&ddtrace_rcache) >= DDTRACE_ROUTING_CACHE_CAPACITY
+        && !zend_hash_find_ptr(&ddtrace_rcache, key)) {
+        ddtrace_routing_cache_evict_oldest();
+    }
+
+    zend_string *persistent_value = zend_string_init(ZSTR_VAL(value), ZSTR_LEN(value), 1);
+    zend_hash_str_update_ptr(&ddtrace_rcache, ZSTR_VAL(key), ZSTR_LEN(key), persistent_value);
+}
diff --git a/tracer/routing_cache.h b/tracer/routing_cache.h
new file mode 100644
index 0000000000..84804d3882
--- /dev/null
+++ b/tracer/routing_cache.h
@@ -0,0 +1,14 @@
+#ifndef DDTRACE_ROUTING_CACHE_H
+#define DDTRACE_ROUTING_CACHE_H
+
+#include <php.h>
+
+#define DDTRACE_ROUTING_CACHE_CAPACITY 500
+
+void ddtrace_routing_cache_minit(void);
+void ddtrace_routing_cache_mshutdown(void);
+
+PHP_FUNCTION(DDTrace_routing_cache_get);
+PHP_FUNCTION(DDTrace_routing_cache_set);
+
+#endif /* DDTRACE_ROUTING_CACHE_H */

From 624bef11e324f5893cf27b11a5e04de357e1dc59 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 18 Aug 2026 12:53:05 +0200
Subject: [PATCH 19/54] Fix pipeline

---
 config.m4 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config.m4 b/config.m4
index 7aa29ce311..b1fbe4563e 100644
--- a/config.m4
+++ b/config.m4
@@ -339,6 +339,7 @@ if test "$PHP_DDTRACE" != "no" && test "$PHP_DDTRACE_PROFILING" = "no"; then
     tracer/priority_sampling/priority_sampling.c \
     tracer/profiling.c \
     tracer/random.c \
+    tracer/routing_cache.c \
     tracer/rule_matching.c \
     tracer/serializer.c \
     tracer/standalone_limiter.c \

From 7161d5c7936f9e177bccf18ef6141326394bfd01 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 18 Aug 2026 14:58:13 +0200
Subject: [PATCH 20/54] Fix pipeline

---
 config.w32                                    |  1 +
 src/bridge/_files_tracer.php                  |  1 +
 .../ext/routing_cache/cache_lru_eviction.phpt | 19 +++++++------------
 3 files changed, 9 insertions(+), 12 deletions(-)

diff --git a/config.w32 b/config.w32
index ee7fb4237c..51c7337d5a 100644
--- a/config.w32
+++ b/config.w32
@@ -74,6 +74,7 @@ if (PHP_DDTRACE != 'no') {
 	DDTRACE_TRACER_SOURCES += " tracer_otel_config.c";
 	DDTRACE_TRACER_SOURCES += " profiling.c";
 	DDTRACE_TRACER_SOURCES += " random.c";
+	DDTRACE_TRACER_SOURCES += " routing_cache.c";
 	DDTRACE_TRACER_SOURCES += " rule_matching.c";
 	DDTRACE_TRACER_SOURCES += " serializer.c";
 	DDTRACE_TRACER_SOURCES += " span.c";
diff --git a/src/bridge/_files_tracer.php b/src/bridge/_files_tracer.php
index 7d924b7fe7..fccea720f0 100644
--- a/src/bridge/_files_tracer.php
+++ b/src/bridge/_files_tracer.php
@@ -41,4 +41,5 @@
     __DIR__ . '/../DDTrace/Propagators/TextMap.php',
     __DIR__ . '/../DDTrace/ScopeManager.php',
     __DIR__ . '/../DDTrace/Tracer.php',
+    __DIR__ . '/../DDTrace/Util/RouteNormalizer.php',
 ];
diff --git a/tests/ext/routing_cache/cache_lru_eviction.phpt b/tests/ext/routing_cache/cache_lru_eviction.phpt
index 597049bfb5..7122ac864c 100644
--- a/tests/ext/routing_cache/cache_lru_eviction.phpt
+++ b/tests/ext/routing_cache/cache_lru_eviction.phpt
@@ -1,31 +1,26 @@
 --TEST--
-DDTrace\routing_cache evicts least-recently-used entry when capacity (500) is exceeded
+DDTrace\routing_cache evicts the oldest inserted entry when capacity (500) is exceeded
 --FILE--
 <?php
 
-// Fill the cache to capacity (500 entries)
+// Fill the cache to capacity (500 entries); key0 is the oldest inserted
 for ($i = 0; $i < 500; $i++) {
     DDTrace\routing_cache_set("key$i", "value$i");
 }
 
-// key0 is the LRU — access key1..key499 to keep them hot, leaving key0 as LRU
-// Actually they were inserted oldest-first, so key0 is at tail (LRU).
-// Verify key0 is still present before eviction
+// key0 is present before any eviction
 var_dump(DDTrace\routing_cache_get('key0'));
 
-// Access key0 to move it to MRU position so key1 becomes LRU
-DDTrace\routing_cache_get('key0');
-
-// Insert one more entry; key1 should be evicted (it's now LRU)
+// Insert one more entry; key0 (oldest) should be evicted
 DDTrace\routing_cache_set('key500', 'value500');
 
-var_dump(DDTrace\routing_cache_get('key1'));   // evicted
-var_dump(DDTrace\routing_cache_get('key0'));   // still present (was accessed)
+var_dump(DDTrace\routing_cache_get('key0'));   // evicted
+var_dump(DDTrace\routing_cache_get('key1'));   // still present
 var_dump(DDTrace\routing_cache_get('key500')); // newly inserted
 
 ?>
 --EXPECT--
 string(6) "value0"
 bool(false)
-string(6) "value0"
+string(6) "value1"
 string(8) "value500"

From b717ae0fa59ed1b7326a4e8c72c41d8b6b0fe04c Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 18 Aug 2026 16:54:29 +0200
Subject: [PATCH 21/54] Fix pipeline

---
 src/DDTrace/Util/RouteNormalizer.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 607c173cfb..b737b7df30 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -26,7 +26,7 @@ public static function normalizeFromLaravel(string $routeUri, array $matchedPara
      *                                   sections like [.json] that have no placeholder param
      * @return string|null
      */
-    public static function normalizeFromSlim(string $pattern, array $matchedParams = [], ?string $urlPath = null)
+    public static function normalizeFromSlim(string $pattern, array $matchedParams = [], $urlPath = null)
     {
         return self::normalizeBraceRoute($pattern, $matchedParams, true, $urlPath);
     }
@@ -39,7 +39,7 @@ public static function normalizeFromSlim(string $pattern, array $matchedParams =
      *                                  route defaults); when provided, absent params are dropped
      * @return string|null
      */
-    public static function normalizeFromSymfony(string $path, ?array $matchedParams = null)
+    public static function normalizeFromSymfony(string $path, $matchedParams = null)
     {
         if ($matchedParams !== null) {
             // Mark params absent from the URL as optional so normalizeBraceSegment drops them.
@@ -299,7 +299,7 @@ private static function normalizeBraceRoute(
         string $route,
         array $matchedParams,
         bool $expandSquare = false,
-        ?string $urlPath = null
+        $urlPath = null
     ) {
         $route = trim($route);
         if ($route === '' || $route === '/') {
@@ -396,7 +396,7 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
      * to decide whether the literal text was part of the request; without it the
      * section is always kept (backward-compatible behaviour).
      */
-    private static function expandSquareBracketOptionals(string $route, array $matchedParams, ?string $urlPath = null): string
+    private static function expandSquareBracketOptionals(string $route, array $matchedParams, $urlPath = null): string
     {
         $prev = null;
         while ($prev !== $route) {

From 852cf42a17e73b4056fe2178f957de1b87340ae3 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 19 Aug 2026 11:10:02 +0200
Subject: [PATCH 22/54] Add cache to wordpress and Slim

---
 .../Integrations/Slim/SlimIntegration.php     | 40 +++++++++++++++----
 .../WordPress/WordPressIntegrationLoader.php  | 10 ++++-
 2 files changed, 40 insertions(+), 10 deletions(-)

diff --git a/src/DDTrace/Integrations/Slim/SlimIntegration.php b/src/DDTrace/Integrations/Slim/SlimIntegration.php
index c795d846ce..81731c2a4a 100644
--- a/src/DDTrace/Integrations/Slim/SlimIntegration.php
+++ b/src/DDTrace/Integrations/Slim/SlimIntegration.php
@@ -77,8 +77,14 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                             /** @var \Slim\Interfaces\RouteInterface $return */
                             $pattern = $return->getPattern();
                             $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
-                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
-                            if ($normalizedRoute !== null) {
+                            $normalizedRoute = \DDTrace\routing_cache_get($pattern);
+                            if ($normalizedRoute === false) {
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
+                                if ($normalizedRoute !== null) {
+                                    \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                                }
+                            }
+                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
                                 $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
 
@@ -99,8 +105,14 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                             $route = $return;
                             $pattern = $route->getPattern();
                             $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
-                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
-                            if ($normalizedRoute !== null) {
+                            $normalizedRoute = \DDTrace\routing_cache_get($pattern);
+                            if ($normalizedRoute === false) {
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
+                                if ($normalizedRoute !== null) {
+                                    \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                                }
+                            }
+                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
                                 $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
                         }
@@ -146,8 +158,14 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                             $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
                             if ($pattern !== '') {
                                 $urlPath = $request->getUri()->getPath();
-                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
-                                if ($normalizedRoute !== null) {
+                                $normalizedRoute = \DDTrace\routing_cache_get($pattern);
+                                if ($normalizedRoute === false) {
+                                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
+                                    if ($normalizedRoute !== null) {
+                                        \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                                    }
+                                }
+                                if ($normalizedRoute !== null && $normalizedRoute !== false) {
                                     $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                                 }
                             }
@@ -160,8 +178,14 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                         $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
                         if ($pattern !== '') {
                             $urlPath = $request->getUri()->getPath();
-                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
-                            if ($normalizedRoute !== null) {
+                            $normalizedRoute = \DDTrace\routing_cache_get($pattern);
+                            if ($normalizedRoute === false) {
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
+                                if ($normalizedRoute !== null) {
+                                    \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                                }
+                            }
+                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
                                 $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
                         }
diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index dca2a4b0c5..85a76ebb60 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -734,8 +734,14 @@ function_exists('is_404') && is_404() === false) {
                     $matchedRule = $This->matched_rule;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $matchedRule;
                     $urlPath = \property_exists($This, 'request') ? $This->request : null;
-                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
-                    if ($normalizedRoute !== null) {
+                    $normalizedRoute = \DDTrace\routing_cache_get($matchedRule);
+                    if ($normalizedRoute === false) {
+                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
+                        if ($normalizedRoute !== null) {
+                            \DDTrace\routing_cache_set($matchedRule, $normalizedRoute);
+                        }
+                    }
+                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
                         $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
                 }

From 6fafc5b89558203d499d27049ba04d29c80c71bd Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 19 Aug 2026 11:44:42 +0200
Subject: [PATCH 23/54] Make hashtable thread safety

---
 tracer/ddtrace.c         |  4 ++--
 tracer/ddtrace_globals.h |  2 ++
 tracer/routing_cache.c   | 26 ++++++++++++--------------
 tracer/routing_cache.h   |  4 ++--
 4 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/tracer/ddtrace.c b/tracer/ddtrace.c
index bd58b68b5a..3940f4d6fd 100644
--- a/tracer/ddtrace.c
+++ b/tracer/ddtrace.c
@@ -245,6 +245,7 @@ void ddtrace_ginit(zend_datadog_globals *ddtrace_globals) {
     UNUSED(ddtrace_globals);
 #endif
     zai_hook_ginit();
+    ddtrace_routing_cache_ginit();
 }
 
 void ddtrace_gshutdown(zend_datadog_globals *datadog_globals) {
@@ -253,6 +254,7 @@ void ddtrace_gshutdown(zend_datadog_globals *datadog_globals) {
     if (datadog_globals->ddtrace.agent_config_reader) {
         ddog_agent_remote_config_reader_drop(datadog_globals->ddtrace.agent_config_reader);
     }
+    ddtrace_routing_cache_gshutdown();
 }
 
 
@@ -374,7 +376,6 @@ void ddtrace_minit_late() {
 
     ddtrace_live_debugger_minit();
     ddtrace_trace_source_minit();
-    ddtrace_routing_cache_minit();
 }
 
 void ddtrace_mshutdown() {
@@ -382,7 +383,6 @@ void ddtrace_mshutdown() {
     zai_hook_mshutdown();
 
     ddtrace_unregister_functions_and_classes();
-    ddtrace_routing_cache_mshutdown();
 
     if (datadog_disable == 1) {
         return;
diff --git a/tracer/ddtrace_globals.h b/tracer/ddtrace_globals.h
index a0bc90fb8c..fa906de4e4 100644
--- a/tracer/ddtrace_globals.h
+++ b/tracer/ddtrace_globals.h
@@ -115,6 +115,8 @@ typedef struct {
     HashTable resource_weak_storage;
     dtor_func_t resource_dtor_func;
 
+    HashTable rcache;
+
     void *ffe_exposure_buffer;
     size_t ffe_exposure_buffer_len;
     size_t ffe_exposure_buffer_cap;
diff --git a/tracer/routing_cache.c b/tracer/routing_cache.c
index fe91fbe1ac..9c9bae5488 100644
--- a/tracer/routing_cache.c
+++ b/tracer/routing_cache.c
@@ -1,8 +1,6 @@
 #include "routing_cache.h"
 #include "ddtrace.h"
 
-static HashTable ddtrace_rcache;
-
 static void ddtrace_routing_cache_dtor(zval *pz) {
     zend_string_release_ex((zend_string *)Z_PTR_P(pz), 1);
 }
@@ -12,19 +10,19 @@ static void ddtrace_routing_cache_evict_oldest(void) {
     zend_string *key;
     zend_ulong num_idx;
 
-    zend_hash_internal_pointer_reset_ex(&ddtrace_rcache, &pos);
-    if (zend_hash_get_current_key_type_ex(&ddtrace_rcache, &pos) == HASH_KEY_IS_STRING) {
-        zend_hash_get_current_key_ex(&ddtrace_rcache, &key, &num_idx, &pos);
-        zend_hash_del(&ddtrace_rcache, key);
+    zend_hash_internal_pointer_reset_ex(&DDTRACE_G(rcache), &pos);
+    if (zend_hash_get_current_key_type_ex(&DDTRACE_G(rcache), &pos) == HASH_KEY_IS_STRING) {
+        zend_hash_get_current_key_ex(&DDTRACE_G(rcache), &key, &num_idx, &pos);
+        zend_hash_del(&DDTRACE_G(rcache), key);
     }
 }
 
-void ddtrace_routing_cache_minit(void) {
-    zend_hash_init(&ddtrace_rcache, DDTRACE_ROUTING_CACHE_CAPACITY, NULL, ddtrace_routing_cache_dtor, 1);
+void ddtrace_routing_cache_ginit(void) {
+    zend_hash_init(&DDTRACE_G(rcache), DDTRACE_ROUTING_CACHE_CAPACITY, NULL, ddtrace_routing_cache_dtor, 1);
 }
 
-void ddtrace_routing_cache_mshutdown(void) {
-    zend_hash_destroy(&ddtrace_rcache);
+void ddtrace_routing_cache_gshutdown(void) {
+    zend_hash_destroy(&DDTRACE_G(rcache));
 }
 
 /* DDTrace\routing_cache_get(string $key): string|false */
@@ -34,7 +32,7 @@ PHP_FUNCTION(DDTrace_routing_cache_get) {
         Z_PARAM_STR(key)
     ZEND_PARSE_PARAMETERS_END();
 
-    zend_string *value = zend_hash_find_ptr(&ddtrace_rcache, key);
+    zend_string *value = zend_hash_find_ptr(&DDTRACE_G(rcache), key);
     if (!value) {
         RETURN_FALSE;
     }
@@ -49,11 +47,11 @@ PHP_FUNCTION(DDTrace_routing_cache_set) {
         Z_PARAM_STR(value)
     ZEND_PARSE_PARAMETERS_END();
 
-    if (zend_hash_num_elements(&ddtrace_rcache) >= DDTRACE_ROUTING_CACHE_CAPACITY
-        && !zend_hash_find_ptr(&ddtrace_rcache, key)) {
+    if (zend_hash_num_elements(&DDTRACE_G(rcache)) >= DDTRACE_ROUTING_CACHE_CAPACITY
+        && !zend_hash_find_ptr(&DDTRACE_G(rcache), key)) {
         ddtrace_routing_cache_evict_oldest();
     }
 
     zend_string *persistent_value = zend_string_init(ZSTR_VAL(value), ZSTR_LEN(value), 1);
-    zend_hash_str_update_ptr(&ddtrace_rcache, ZSTR_VAL(key), ZSTR_LEN(key), persistent_value);
+    zend_hash_str_update_ptr(&DDTRACE_G(rcache), ZSTR_VAL(key), ZSTR_LEN(key), persistent_value);
 }
diff --git a/tracer/routing_cache.h b/tracer/routing_cache.h
index 84804d3882..9a0acbfe76 100644
--- a/tracer/routing_cache.h
+++ b/tracer/routing_cache.h
@@ -5,8 +5,8 @@
 
 #define DDTRACE_ROUTING_CACHE_CAPACITY 500
 
-void ddtrace_routing_cache_minit(void);
-void ddtrace_routing_cache_mshutdown(void);
+void ddtrace_routing_cache_ginit(void);
+void ddtrace_routing_cache_gshutdown(void);
 
 PHP_FUNCTION(DDTrace_routing_cache_get);
 PHP_FUNCTION(DDTrace_routing_cache_set);

From 4ece1314dded2cfcd5c3d957783abd4085a4bab1 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 19 Aug 2026 13:25:52 +0200
Subject: [PATCH 24/54] Fix pipeline

---
 tracer/routing_cache.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tracer/routing_cache.c b/tracer/routing_cache.c
index 9c9bae5488..54475c6dc7 100644
--- a/tracer/routing_cache.c
+++ b/tracer/routing_cache.c
@@ -1,6 +1,8 @@
 #include "routing_cache.h"
 #include "ddtrace.h"
 
+ZEND_EXTERN_MODULE_GLOBALS(datadog);
+
 static void ddtrace_routing_cache_dtor(zval *pz) {
     zend_string_release_ex((zend_string *)Z_PTR_P(pz), 1);
 }

From 25a08eaca0179035fff7d1c671f676f5cbf784a6 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 19 Aug 2026 14:50:32 +0200
Subject: [PATCH 25/54] Fix pipeline

---
 src/DDTrace/Util/RouteNormalizer.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index b737b7df30..76bb2e96d8 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -519,7 +519,7 @@ private static function cakephpToBraces(string $template): string
     {
         $result = preg_replace('#/\*\*#', '/{catchall}', $template);
         $result = preg_replace('#/\*(?!\*)#', '/{catchall}', $result);
-        $result = preg_replace('#(?<![/*])\*(?![/*])#', '{catchall}', $result);
+        $result = preg_replace('#(?<![\/\*])\*(?![\/\*])#', '{catchall}', $result);
 
         return preg_replace_callback(
             '/:([a-zA-Z_][a-zA-Z0-9_]*)/',

From 49089142635e4c07b63f63e41d0d67b9b5b3539d Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 19 Aug 2026 15:44:03 +0200
Subject: [PATCH 26/54] Fix pipeline

---
 tracer/ddtrace.c       | 4 ++--
 tracer/routing_cache.c | 8 ++++----
 tracer/routing_cache.h | 4 ++--
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/tracer/ddtrace.c b/tracer/ddtrace.c
index 3940f4d6fd..81c56f1266 100644
--- a/tracer/ddtrace.c
+++ b/tracer/ddtrace.c
@@ -245,7 +245,7 @@ void ddtrace_ginit(zend_datadog_globals *ddtrace_globals) {
     UNUSED(ddtrace_globals);
 #endif
     zai_hook_ginit();
-    ddtrace_routing_cache_ginit();
+    ddtrace_routing_cache_ginit(&ddtrace_globals->ddtrace.rcache);
 }
 
 void ddtrace_gshutdown(zend_datadog_globals *datadog_globals) {
@@ -254,7 +254,7 @@ void ddtrace_gshutdown(zend_datadog_globals *datadog_globals) {
     if (datadog_globals->ddtrace.agent_config_reader) {
         ddog_agent_remote_config_reader_drop(datadog_globals->ddtrace.agent_config_reader);
     }
-    ddtrace_routing_cache_gshutdown();
+    ddtrace_routing_cache_gshutdown(&datadog_globals->ddtrace.rcache);
 }
 
 
diff --git a/tracer/routing_cache.c b/tracer/routing_cache.c
index 54475c6dc7..a69f7cd1cb 100644
--- a/tracer/routing_cache.c
+++ b/tracer/routing_cache.c
@@ -19,12 +19,12 @@ static void ddtrace_routing_cache_evict_oldest(void) {
     }
 }
 
-void ddtrace_routing_cache_ginit(void) {
-    zend_hash_init(&DDTRACE_G(rcache), DDTRACE_ROUTING_CACHE_CAPACITY, NULL, ddtrace_routing_cache_dtor, 1);
+void ddtrace_routing_cache_ginit(HashTable *rcache) {
+    zend_hash_init(rcache, DDTRACE_ROUTING_CACHE_CAPACITY, NULL, ddtrace_routing_cache_dtor, 1);
 }
 
-void ddtrace_routing_cache_gshutdown(void) {
-    zend_hash_destroy(&DDTRACE_G(rcache));
+void ddtrace_routing_cache_gshutdown(HashTable *rcache) {
+    zend_hash_destroy(rcache);
 }
 
 /* DDTrace\routing_cache_get(string $key): string|false */
diff --git a/tracer/routing_cache.h b/tracer/routing_cache.h
index 9a0acbfe76..37961f5ba8 100644
--- a/tracer/routing_cache.h
+++ b/tracer/routing_cache.h
@@ -5,8 +5,8 @@
 
 #define DDTRACE_ROUTING_CACHE_CAPACITY 500
 
-void ddtrace_routing_cache_ginit(void);
-void ddtrace_routing_cache_gshutdown(void);
+void ddtrace_routing_cache_ginit(HashTable *rcache);
+void ddtrace_routing_cache_gshutdown(HashTable *rcache);
 
 PHP_FUNCTION(DDTrace_routing_cache_get);
 PHP_FUNCTION(DDTrace_routing_cache_set);

From 78edf059c279f6622e94bb9e02c615015ebfdf4c Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 20 Aug 2026 11:14:27 +0200
Subject: [PATCH 27/54] Fix codeigniter

---
 .../Integrations/CodeIgniter/V2/CodeIgniterIntegration.php      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
index 4e5cb94ea2..aecd169bbd 100644
--- a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
+++ b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
@@ -222,7 +222,7 @@ function (SpanData $span, $args, $retval, $ex) use ($adapter, $service) {
     /*
      * Replicate CodeIgniter's route parsing, as matching key is never stored or returned in the framework.
      */
-    private static function setNormalizedRoute($rootSpan, string $pattern): void {
+    private static function setNormalizedRoute($rootSpan, string $pattern) {
         $cacheKey = $pattern;
         $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
         if ($normalizedRoute === false) {

From efb527cd90cbc519c2dd1358fb0e516f370540fe Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 26 Aug 2026 12:13:09 +0200
Subject: [PATCH 28/54] Add appsec integration tests

---
 .../php/integration/Laminas33Tests.groovy     | 34 +++++++++++++++++++
 .../php/integration/Laravel8xTests.groovy     |  4 +++
 .../php/integration/Symfony62Tests.groovy     |  4 +++
 3 files changed, 42 insertions(+)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
index 60b61f76aa..30107b0144 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
@@ -246,6 +246,7 @@ class Laminas33Tests {
         assert span.meta.'_dd.appsec.event_rules.version' != ''
         assert span.meta.'appsec.blocked' == 'true'
         assert span.meta.'http.route' == '/dynamic-path[/:param01]'
+        assert span.meta.'_dd.appsec.normalized_route' == '/dynamic-path/{param01}'
     }
 
     @Test
@@ -256,12 +257,14 @@ class Laminas33Tests {
             assert resp.statusCode() == 200
         }
         assert nestedTrace.first().meta.'http.route' == '/resource/:resourceId/:subId'
+        assert nestedTrace.first().meta.'_dd.appsec.normalized_route' == '/resource/{resourceId}/{subId}'
 
         HttpRequest chainReq = container.buildReq('/chain/abc').GET().build()
         Trace chainTrace = container.traceFromRequest(chainReq, ofString()) { HttpResponse<String> resp ->
             assert resp.statusCode() == 200
         }
         assert chainTrace.first().meta.'http.route' == '/chain/:chainId'
+        assert chainTrace.first().meta.'_dd.appsec.normalized_route' == '/chain/{chainId}'
     }
 
     @Test
@@ -286,6 +289,7 @@ class Laminas33Tests {
             assert resp.statusCode() == 200
         }
         assert regexTrace.first().meta.'http.route' == '/regex-year/%year%'
+        assert regexTrace.first().meta.'_dd.appsec.normalized_route' == '/regex-year/{year}'
 
         Trace schemeTrace = container.traceFromRequest(
                 container.buildReq('/scheme-only-page').GET().build(),
@@ -293,6 +297,7 @@ class Laminas33Tests {
             assert resp.statusCode() == 200
         }
         assert schemeTrace.first().meta.'http.route' == '/scheme-only-page'
+        assert schemeTrace.first().meta.'_dd.appsec.normalized_route' == '/scheme-only-page'
 
         Trace placeholderTrace = container.traceFromRequest(
                 container.buildReq('/placeholder-literal').GET().build(),
@@ -300,6 +305,7 @@ class Laminas33Tests {
             assert resp.statusCode() == 200
         }
         assert placeholderTrace.first().meta.'http.route' == '/placeholder-literal'
+        assert placeholderTrace.first().meta.'_dd.appsec.normalized_route' == '/placeholder-literal'
 
         Trace wildcardTrace = container.traceFromRequest(
                 container.buildReq('/wildcard-keys/foo/bar').GET().build(),
@@ -307,5 +313,33 @@ class Laminas33Tests {
             assert resp.statusCode() == 200
         }
         assert wildcardTrace.first().meta.'http.route' == '/wildcard-keys/*'
+        assert wildcardTrace.first().meta.'_dd.appsec.normalized_route' == '/wildcard-keys/{param1}'
+    }
+
+    @Test
+    @Order(11)
+    void 'optional segment absent produces correct normalized route'() {
+        // /application[/:action] with no action in URL — optional section dropped
+        // (default action=index is injected by the router but /index is not in the URL path)
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/application').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+        assert trace.first().meta.'http.route' == '/application[/:action]'
+        assert trace.first().meta.'_dd.appsec.normalized_route' == '/application'
+    }
+
+    @Test
+    @Order(12)
+    void 'optional segment present produces correct normalized route'() {
+        // /application[/:action] with action in URL — optional section expanded
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/application/test').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+        assert trace.first().meta.'http.route' == '/application[/:action]'
+        assert trace.first().meta.'_dd.appsec.normalized_route' == '/application/{action}'
     }
 }
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
index 16e182d17c..2d568eb90e 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
@@ -170,6 +170,10 @@ class Laravel8xTests {
         assert span.metrics."_dd.appsec.waf.duration" > 0.0d
         assert span.meta."_dd.appsec.event_rules.version" != ''
         assert span.meta."appsec.blocked" == "true"
+        // Laravel uri() returns the route without a leading slash
+        assert span.meta."http.route" == 'dynamic-path/{param01}'
+        // Normalizer adds the leading slash and keeps {param01} as-is
+        assert span.meta."_dd.appsec.normalized_route" == '/dynamic-path/{param01}'
     }
 
     @Test
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
index f933c5c3c0..c0f23c0589 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
@@ -116,6 +116,7 @@ class Symfony62Tests {
         assert span.meta."_dd.appsec.event_rules.version" != ''
         assert span.meta."appsec.blocked" == "true"
         assert span.meta."http.route" == '/dynamic-path/{param01}'
+        assert span.meta."_dd.appsec.normalized_route" == '/dynamic-path/{param01}'
     }
 
     @Test
@@ -129,6 +130,7 @@ class Symfony62Tests {
 
         Span span = trace.first()
         assert span.meta."http.route" == '/caminho-dinamico/{param01}'
+        assert span.meta."_dd.appsec.normalized_route" == '/caminho-dinamico/{param01}'
     }
 
     @Test
@@ -141,6 +143,8 @@ class Symfony62Tests {
 
         Span span = trace.first()
         assert span.meta."http.route" == '/café/{item}'
+        // Static segment 'café' is percent-encoded per RFC 3986; é (U+00E9) → %C3%A9
+        assert span.meta."_dd.appsec.normalized_route" == '/caf%C3%A9/{item}'
     }
 
     @Test

From 8a4e8cb1dac1ff76906e476f7ee9b42c2d41c2d2 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 26 Aug 2026 13:29:23 +0200
Subject: [PATCH 29/54] Fix integration tests

---
 .../com/datadog/appsec/php/integration/Laminas33Tests.groovy    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
index 30107b0144..e7bc4692cd 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
@@ -335,7 +335,7 @@ class Laminas33Tests {
     void 'optional segment present produces correct normalized route'() {
         // /application[/:action] with action in URL — optional section expanded
         Trace trace = container.traceFromRequest(
-                container.buildReq('/application/test').GET().build(),
+                container.buildReq('/application/hello').GET().build(),
                 ofString()) { HttpResponse<String> resp ->
             assert resp.statusCode() == 200
         }

From 6bb9203ebca2baa47375b7168f35965da54e9a0e Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 10:27:18 +0200
Subject: [PATCH 30/54] Amend test file name

---
 .../{cache_lru_eviction.phpt => cache_capacity_eviction.phpt}     | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename tests/ext/routing_cache/{cache_lru_eviction.phpt => cache_capacity_eviction.phpt} (100%)

diff --git a/tests/ext/routing_cache/cache_lru_eviction.phpt b/tests/ext/routing_cache/cache_capacity_eviction.phpt
similarity index 100%
rename from tests/ext/routing_cache/cache_lru_eviction.phpt
rename to tests/ext/routing_cache/cache_capacity_eviction.phpt

From 502d23c9846ab66e7799439de96bb1eaaeb74886 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 11:19:57 +0200
Subject: [PATCH 31/54] Generate normalise routes only when appsec is enabled

---
 .../CakePHP/CakePHPIntegration.php            | 19 ++---
 .../CodeIgniter/V2/CodeIgniterIntegration.php |  3 +
 .../Laminas/LaminasIntegration.php            | 12 +--
 .../Laravel/LaravelIntegration.php            | 20 ++---
 .../Integrations/Slim/SlimIntegration.php     | 80 ++++++++++---------
 .../Symfony/SymfonyIntegration.php            | 10 ++-
 .../WordPress/WordPressIntegrationLoader.php  | 20 ++---
 .../Integrations/Yii/YiiIntegration.php       | 20 ++---
 .../CakePHP/V2_8/CommonScenariosTest.php      |  4 -
 .../CakePHP/V3_10/CommonScenariosTest.php     |  4 -
 .../CakePHP/V4_5/CommonScenariosTest.php      |  4 -
 .../CodeIgniter/V2_2/CommonScenariosTest.php  |  4 -
 .../CodeIgniter/V2_2/ExitTest.php             |  1 -
 .../CodeIgniter/V2_2/NoCI_ControllertTest.php |  1 -
 .../Octane/Latest/CommonScenariosTest.php     |  3 -
 .../Laravel/V4/CommonScenariosTest.php        |  3 -
 .../Laravel/V4/TraceSearchConfigTest.php      |  1 -
 .../Laravel/V5_7/TraceSearchConfigTest.php    |  1 -
 .../Laravel/V5_8/TraceSearchConfigTest.php    |  1 -
 .../Laravel/V8_x/InternalExceptionsTest.php   |  2 -
 .../Laravel/V8_x/RouteCachingTest.php         |  2 -
 .../Laravel/V8_x/TraceSearchConfigTest.php    |  1 -
 .../Slim/Latest/CommonScenariosTest.php       |  4 -
 .../Slim/V3_12/CommonScenariosTest.php        |  4 -
 .../Symfony/Latest/CommonScenariosTest.php    |  3 -
 .../Symfony/V4_4/CommonScenariosTest.php      |  3 -
 .../Symfony/V4_4/TraceSearchConfigTest.php    |  1 -
 .../Symfony/V5_0/CommonScenariosTest.php      |  3 -
 .../Symfony/V5_0/TraceSearchConfigTest.php    |  1 -
 .../Symfony/V5_1/CommonScenariosTest.php      |  3 -
 .../Symfony/V5_1/TraceSearchConfigTest.php    |  1 -
 .../Symfony/V5_2/CommonScenariosTest.php      |  3 -
 .../Symfony/V5_2/TraceSearchConfigTest.php    |  1 -
 .../Symfony/V6_2/CommonScenariosTest.php      |  3 -
 .../Symfony/V6_2/TraceSearchConfigTest.php    |  1 -
 .../Symfony/V7_3/CommonScenariosTest.php      |  3 -
 .../Yii/Latest/CommonScenariosTest.php        |  4 -
 .../LazyLoadingIntegrationsFromYiiTest.php    |  1 -
 tests/Integrations/Yii/Latest/ModuleTest.php  |  1 -
 .../Yii/Latest/ParameterizedRouteTest.php     |  1 -
 ...oller_test.test_scenario_health_check.json |  1 -
 ..._test.test_scenario_get_parameterized.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...st.test_scenario_get_to_missing_route.json |  1 -
 ...est_scenario_get_to_missing_route_cgi.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ....test_scenario_get_with_exception_cgi.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ...ter.v3_1.exit_test.test_scenario_exit.json |  1 -
 ...atest.rest_test.test_scenario_rest2xx.json |  1 -
 ...atest.rest_test.test_scenario_rest4xx.json |  1 -
 ...atest.rest_test.test_scenario_rest5xx.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ...pigw_test.test_laravel_inferred_proxy.json |  1 -
 ...test_laravel_inferred_proxy_exception.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...t_scenario_get_with_ignored_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ...octane.apigw_test.test_inferred_proxy.json |  1 -
 ...gw_test.test_inferred_proxy_exception.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...t_scenario_get_with_ignored_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_dynamic_route.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_dynamic_route.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_dynamic_route.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ...aravel.v8_x.queue_test.test_broadcast.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ...est.messenger_test.test_async_failure.json |  1 -
 ...est.messenger_test.test_async_success.json |  1 -
 ...async_with_tracer_disabled_on_consume.json |  1 -
 ...4_4.messenger_test.test_async_failure.json |  1 -
 ...4_4.messenger_test.test_async_success.json |  1 -
 ...async_with_tracer_disabled_on_consume.json |  1 -
 ...5_2.messenger_test.test_async_failure.json |  1 -
 ...5_2.messenger_test.test_async_success.json |  1 -
 ...async_with_tracer_disabled_on_consume.json |  1 -
 ...6_2.messenger_test.test_async_failure.json |  1 -
 ...6_2.messenger_test.test_async_success.json |  1 -
 ...async_with_tracer_disabled_on_consume.json |  1 -
 ...7_3.messenger_test.test_async_failure.json |  1 -
 ...7_3.messenger_test.test_async_success.json |  1 -
 ...async_with_tracer_disabled_on_consume.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...acks_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...acks_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...acks_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...acks_test.test_scenario_get_with_view.json |  1 -
 ..._test.test_scenario_get_return_string.json |  1 -
 ...test.test_scenario_get_with_exception.json |  1 -
 ...rios_test.test_scenario_get_with_view.json |  1 -
 128 files changed, 103 insertions(+), 242 deletions(-)

diff --git a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
index 9e9f171ba5..b07a586f17 100644
--- a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
+++ b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
@@ -73,16 +73,17 @@ public static function init(): int
             if ($rootSpan !== null) {
                 $template = $app->template;
                 $rootSpan->meta[Tag::HTTP_ROUTE] = $template;
-                $cacheKey = $template;
-                $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
-                if ($normalizedRoute === false) {
-                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCakePHP($template);
-                    if ($normalizedRoute !== null) {
-                        \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                    $normalizedRoute = \DDTrace\routing_cache_get($template);
+                    if ($normalizedRoute === false) {
+                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCakePHP($template);
+                        if ($normalizedRoute !== null) {
+                            \DDTrace\routing_cache_set($template, $normalizedRoute);
+                        }
+                    }
+                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
-                }
-                if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                 }
             }
         };
diff --git a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
index aecd169bbd..8c98cad9de 100644
--- a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
+++ b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
@@ -223,6 +223,9 @@ function (SpanData $span, $args, $retval, $ex) use ($adapter, $service) {
      * Replicate CodeIgniter's route parsing, as matching key is never stored or returned in the framework.
      */
     private static function setNormalizedRoute($rootSpan, string $pattern) {
+        if (!function_exists('\datadog\appsec\is_enabled') || !\datadog\appsec\is_enabled()) {
+            return;
+        }
         $cacheKey = $pattern;
         $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
         if ($normalizedRoute === false) {
diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 6628a8843c..47eda39db3 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -291,11 +291,13 @@ static function (SpanData $span) use ($controller, $action) {
                     }
                     if ($httpRoute !== null && $httpRoute !== false && $httpRoute !== '') {
                         $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
-                        $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
-                        $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
-                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
-                        if ($normalizedRoute !== null) {
-                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                        if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                            $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
+                            $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
+                            if ($normalizedRoute !== null) {
+                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                            }
                         }
                     }
                 }
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index 4c8fb093e0..66155cc658 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -141,16 +141,18 @@ static function ($This, $scope, $args, $route) {
                 if (\method_exists($route, 'uri')) {
                     $httpRoute = $route->uri();
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
-                    $normalizedRoute = \DDTrace\routing_cache_get($httpRoute);
-                    if ($normalizedRoute === false) {
-                        $matchedParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
-                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaravel($httpRoute, $matchedParams);
-                        if ($normalizedRoute !== null) {
-                            \DDTrace\routing_cache_set($httpRoute, $normalizedRoute);
+                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                        $normalizedRoute = \DDTrace\routing_cache_get($httpRoute);
+                        if ($normalizedRoute === false) {
+                            $matchedParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaravel($httpRoute, $matchedParams);
+                            if ($normalizedRoute !== null) {
+                                \DDTrace\routing_cache_set($httpRoute, $normalizedRoute);
+                            }
+                        }
+                        if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                         }
-                    }
-                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
                 }
                 if (\method_exists($route, 'parameters') && function_exists('\datadog\appsec\push_addresses')) {
diff --git a/src/DDTrace/Integrations/Slim/SlimIntegration.php b/src/DDTrace/Integrations/Slim/SlimIntegration.php
index 81731c2a4a..bff645e850 100644
--- a/src/DDTrace/Integrations/Slim/SlimIntegration.php
+++ b/src/DDTrace/Integrations/Slim/SlimIntegration.php
@@ -77,15 +77,17 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                             /** @var \Slim\Interfaces\RouteInterface $return */
                             $pattern = $return->getPattern();
                             $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
-                            $normalizedRoute = \DDTrace\routing_cache_get($pattern);
-                            if ($normalizedRoute === false) {
-                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
-                                if ($normalizedRoute !== null) {
-                                    \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                            if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                                $normalizedRoute = \DDTrace\routing_cache_get($pattern);
+                                if ($normalizedRoute === false) {
+                                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
+                                    if ($normalizedRoute !== null) {
+                                        \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                                    }
+                                }
+                                if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                                 }
-                            }
-                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
 
                             if (dd_trace_env_config("DD_HTTP_SERVER_ROUTE_BASED_NAMING")) {
@@ -105,15 +107,17 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                             $route = $return;
                             $pattern = $route->getPattern();
                             $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
-                            $normalizedRoute = \DDTrace\routing_cache_get($pattern);
-                            if ($normalizedRoute === false) {
-                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
-                                if ($normalizedRoute !== null) {
-                                    \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                            if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                                $normalizedRoute = \DDTrace\routing_cache_get($pattern);
+                                if ($normalizedRoute === false) {
+                                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
+                                    if ($normalizedRoute !== null) {
+                                        \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                                    }
+                                }
+                                if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                                 }
-                            }
-                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
                         }
                     );
@@ -154,7 +158,30 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                                 $rootSpan->meta['slim.route.name'] = $routeName;
                             }
                             // Refine normalized route now that matched params are available
-                            $matchedParams = method_exists($route, 'getArguments') ? ($route->getArguments() ?? []) : [];
+                            if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                                $matchedParams = method_exists($route, 'getArguments') ? ($route->getArguments() ?? []) : [];
+                                $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
+                                if ($pattern !== '') {
+                                    $urlPath = $request->getUri()->getPath();
+                                    $normalizedRoute = \DDTrace\routing_cache_get($pattern);
+                                    if ($normalizedRoute === false) {
+                                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
+                                        if ($normalizedRoute !== null) {
+                                            \DDTrace\routing_cache_set($pattern, $normalizedRoute);
+                                        }
+                                    }
+                                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                                    }
+                                }
+                            }
+                        }
+                    } else {
+                        $rootSpan->meta['slim.route.controller'] = $callableName;
+                        $span->name = 'slim.route.controller';
+                        // Refine normalized route now that matched params are available (Slim 3)
+                        if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                            $matchedParams = isset($args[3]) && is_array($args[3]) ? $args[3] : [];
                             $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
                             if ($pattern !== '') {
                                 $urlPath = $request->getUri()->getPath();
@@ -170,25 +197,6 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                                 }
                             }
                         }
-                    } else {
-                        $rootSpan->meta['slim.route.controller'] = $callableName;
-                        $span->name = 'slim.route.controller';
-                        // Refine normalized route now that matched params are available (Slim 3)
-                        $matchedParams = isset($args[3]) && is_array($args[3]) ? $args[3] : [];
-                        $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
-                        if ($pattern !== '') {
-                            $urlPath = $request->getUri()->getPath();
-                            $normalizedRoute = \DDTrace\routing_cache_get($pattern);
-                            if ($normalizedRoute === false) {
-                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
-                                if ($normalizedRoute !== null) {
-                                    \DDTrace\routing_cache_set($pattern, $normalizedRoute);
-                                }
-                            }
-                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                            }
-                        }
                     }
                 };
 
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index 471e40d6be..9584e3cd65 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -466,10 +466,12 @@ static function() {
 
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
-                    $matchedParams = self::inferSymfonyRouteParams($path, $request->getPathInfo());
-                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path, $matchedParams);
-                    if ($normalizedRoute !== null) {
-                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                        $matchedParams = self::inferSymfonyRouteParams($path, $request->getPathInfo());
+                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path, $matchedParams);
+                        if ($normalizedRoute !== null) {
+                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
+                        }
                     }
                 }
             };
diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index 85a76ebb60..87b68d9578 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -733,16 +733,18 @@ function_exists('is_404') && is_404() === false) {
                 if (\property_exists($This, 'matched_rule')) {
                     $matchedRule = $This->matched_rule;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $matchedRule;
-                    $urlPath = \property_exists($This, 'request') ? $This->request : null;
-                    $normalizedRoute = \DDTrace\routing_cache_get($matchedRule);
-                    if ($normalizedRoute === false) {
-                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
-                        if ($normalizedRoute !== null) {
-                            \DDTrace\routing_cache_set($matchedRule, $normalizedRoute);
+                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                        $urlPath = \property_exists($This, 'request') ? $This->request : null;
+                        $normalizedRoute = \DDTrace\routing_cache_get($matchedRule);
+                        if ($normalizedRoute === false) {
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
+                            if ($normalizedRoute !== null) {
+                                \DDTrace\routing_cache_set($matchedRule, $normalizedRoute);
+                            }
+                        }
+                        if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                         }
-                    }
-                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
                 }
             }
diff --git a/src/DDTrace/Integrations/Yii/YiiIntegration.php b/src/DDTrace/Integrations/Yii/YiiIntegration.php
index 32269f4928..b9368921b7 100644
--- a/src/DDTrace/Integrations/Yii/YiiIntegration.php
+++ b/src/DDTrace/Integrations/Yii/YiiIntegration.php
@@ -156,16 +156,18 @@ function (SpanData $span, $args) use (&$firstController) {
 
                     $rootSpan->meta['app.route.path'] = $routePath;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $routePath;
-                    $cacheKey = $routePath;
-                    $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
-                    if ($normalizedRoute === false) {
-                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromYii($routePath);
-                        if ($normalizedRoute !== null) {
-                            \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                        $cacheKey = $routePath;
+                        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+                        if ($normalizedRoute === false) {
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromYii($routePath);
+                            if ($normalizedRoute !== null) {
+                                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                            }
+                        }
+                        if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                         }
-                    }
-                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                     }
 
                     if (dd_trace_env_config("DD_HTTP_SERVER_ROUTE_BASED_NAMING")) {
diff --git a/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php b/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php
index 73640dd8ba..506df7debe 100644
--- a/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php
+++ b/tests/Integrations/CakePHP/V2_8/CommonScenariosTest.php
@@ -58,7 +58,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/:controller',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -85,7 +84,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/:controller',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -121,7 +119,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
                         'http.route' => '/:controller',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withExistingTagsNames([
@@ -164,7 +161,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/parameterized/paramValue',
                         'http.status_code' => '200',
                         'http.route' => '/parameterized/:param',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
diff --git a/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php b/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php
index af0184198e..76a6440d44 100644
--- a/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php
+++ b/tests/Integrations/CakePHP/V3_10/CommonScenariosTest.php
@@ -59,7 +59,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/{controller}',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -86,7 +85,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
                         'http.route' => '/{controller}',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
@@ -122,7 +120,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
                         'http.route' => '/{controller}',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withExistingTagsNames([
@@ -165,7 +162,6 @@ public function provideSpecs()
                         'http.url' => 'http://localhost/parameterized/paramValue',
                         'http.status_code' => '200',
                         'http.route' => '/parameterized/:param',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
                     ])->withChildren([
diff --git a/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php b/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php
index 953d3705cb..f1e8501573 100644
--- a/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php
+++ b/tests/Integrations/CakePHP/V4_5/CommonScenariosTest.php
@@ -61,7 +61,6 @@ public function provideSpecs()
                         'http.route' => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Controller.invokeAction',
@@ -88,7 +87,6 @@ public function provideSpecs()
                         'http.route' => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Controller.invokeAction',
@@ -125,7 +123,6 @@ public function provideSpecs()
                         'http.route' => '/{controller}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/{controller}',
                     ])->withExistingTagsNames([
                         'error.stack'
                     ])->setError(
@@ -168,7 +165,6 @@ public function provideSpecs()
                         'http.route' => '/parameterized/{param}',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'cakephp',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Controller.invokeAction',
diff --git a/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php b/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
index 900e78630b..f7f15701e1 100644
--- a/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
@@ -56,7 +56,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
                         Tag::HTTP_ROUTE => 'simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Simple.index',
@@ -82,7 +81,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
                         Tag::HTTP_ROUTE => 'simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Simple_View.index',
@@ -118,7 +116,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
                         Tag::HTTP_ROUTE => 'error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])
                     ->setError("Exception", "Uncaught Exception: datadog in %s:%d")
                     ->withExistingTagsNames(['error.stack'])
@@ -147,7 +144,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
                         Tag::HTTP_ROUTE =>  'parameterized/(:any)',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{param1}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'Parameterized.customAction',
diff --git a/tests/Integrations/CodeIgniter/V2_2/ExitTest.php b/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
index 78f97fbd72..6b6a5a32d7 100644
--- a/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
@@ -44,7 +44,6 @@ public function testScenario()
                     Tag::SPAN_KIND => 'server',
                     Tag::COMPONENT => 'codeigniter',
                     Tag::HTTP_ROUTE => 'exits',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/exits',
                 ])->withChildren([
                     SpanAssertion::build(
                         'Exits.index',
diff --git a/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php b/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php
index 6cc6b584ec..ebdee1225e 100644
--- a/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/NoCI_ControllertTest.php
@@ -43,7 +43,6 @@ public function testScenario()
                     Tag::SPAN_KIND => 'server',
                     Tag::COMPONENT => 'codeigniter',
                     Tag::HTTP_ROUTE => 'health_check/ping',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/health_check/ping',
                 ])->withChildren([
                     SpanAssertion::build(
                         'Health_check.ping',
diff --git a/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php b/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php
index a6c5489b50..a787ff2574 100644
--- a/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Laravel/Octane/Latest/CommonScenariosTest.php
@@ -102,7 +102,6 @@ public function testScenarioGetReturnString()
                 Tag::HTTP_METHOD => 'GET',
                 Tag::HTTP_URL => 'http://localhost/simple?key=value&<redacted>',
                 Tag::HTTP_ROUTE => 'simple',
-                Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                 Tag::HTTP_STATUS_CODE => '200',
                 Tag::SPAN_KIND => 'server',
                 Tag::COMPONENT => 'laravel',
@@ -175,7 +174,6 @@ public function testScenarioGetWithView()
                 Tag::HTTP_METHOD => 'GET',
                 Tag::HTTP_URL => 'http://localhost/simple_view?key=value&<redacted>',
                 Tag::HTTP_ROUTE => 'simple_view',
-                Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                 Tag::HTTP_STATUS_CODE => '200',
                 Tag::SPAN_KIND => 'server',
                 Tag::COMPONENT => 'laravel',
@@ -265,7 +263,6 @@ public function testScenarioGetWithException()
                 Tag::HTTP_METHOD => 'GET',
                 Tag::HTTP_URL => 'http://localhost/error?key=value&<redacted>',
                 Tag::HTTP_ROUTE => 'error',
-                Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                 Tag::HTTP_STATUS_CODE => '500',
                 Tag::SPAN_KIND => 'server',
                 Tag::COMPONENT => 'laravel',
diff --git a/tests/Integrations/Laravel/V4/CommonScenariosTest.php b/tests/Integrations/Laravel/V4/CommonScenariosTest.php
index b5f6fa4846..122a694717 100644
--- a/tests/Integrations/Laravel/V4/CommonScenariosTest.php
+++ b/tests/Integrations/Laravel/V4/CommonScenariosTest.php
@@ -57,7 +57,6 @@ public function provideSpecs()
                             'http.url' => 'http://localhost/simple?key=value&<redacted>',
                             'http.status_code' => '200',
                             'http.route' => 'simple',
-                            Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                             'some.key1' => 'value',
                             'some.key2' => 'value2',
                             TAG::SPAN_KIND => 'server',
@@ -150,7 +149,6 @@ public function provideSpecs()
                             'http.url' => 'http://localhost/error?key=value&<redacted>',
                             'http.status_code' => '500',
                             'http.route' => 'error',
-                            Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                             'some.key1' => 'value',
                             'some.key2' => 'value2',
                             TAG::SPAN_KIND => 'server',
@@ -201,7 +199,6 @@ public function provideSpecs()
                             'http.url' => 'http://localhost/dynamic_route/dynamic01/static/dynamic02',
                             'http.status_code' => '200',
                             'http.route' => 'dynamic_route/{param01}/static/{param02?}',
-                            Tag::APPSEC_NORMALIZED_ROUTE => '/dynamic_route/{param01}/static/{param02}',
                             'some.key1' => 'value',
                             'some.key2' => 'value2',
                             TAG::SPAN_KIND => 'server',
diff --git a/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php
index 4e9503f841..3109b07dde 100644
--- a/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V4/TraceSearchConfigTest.php
@@ -44,7 +44,6 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php
index 80ece12dd9..402c38eab8 100644
--- a/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V5_7/TraceSearchConfigTest.php
@@ -49,7 +49,6 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php
index 69b60c54ea..3d8fd4681e 100644
--- a/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V5_8/TraceSearchConfigTest.php
@@ -49,7 +49,6 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php b/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php
index e36a8fd2cc..8441164c14 100644
--- a/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php
+++ b/tests/Integrations/Laravel/V8_x/InternalExceptionsTest.php
@@ -46,7 +46,6 @@ public function testNotImplemented()
                         'http.url' => 'http://localhost/not-implemented',
                         'http.status_code' => '501',
                         'http.route' => 'not-implemented',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/not-implemented',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
@@ -110,7 +109,6 @@ public function testUnauthorized()
                         'http.url' => 'http://localhost/unauthorized',
                         'http.status_code' => '403',
                         'http.route' => 'unauthorized',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/unauthorized',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V8_x/RouteCachingTest.php b/tests/Integrations/Laravel/V8_x/RouteCachingTest.php
index 439caf00ea..bd32474fc5 100644
--- a/tests/Integrations/Laravel/V8_x/RouteCachingTest.php
+++ b/tests/Integrations/Laravel/V8_x/RouteCachingTest.php
@@ -45,7 +45,6 @@ public function testNotCached()
                         'http.url' => 'http://localhost/unnamed-route',
                         'http.status_code' => '200',
                         'http.route' => 'unnamed-route',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/unnamed-route',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
@@ -95,7 +94,6 @@ public function testCached()
                         'http.url' => 'http://localhost/unnamed-route',
                         'http.status_code' => '200',
                         'http.route' => 'unnamed-route',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/unnamed-route',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php b/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php
index 849acf0f3f..0d76259fbc 100644
--- a/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php
+++ b/tests/Integrations/Laravel/V8_x/TraceSearchConfigTest.php
@@ -49,7 +49,6 @@ public function testScenario()
                         'http.url' => 'http://localhost/simple',
                         'http.status_code' => '200',
                         'http.route' => 'simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         TAG::SPAN_KIND => 'server',
                         TAG::COMPONENT => 'laravel',
                         '_dd.svc_src' => 'laravel',
diff --git a/tests/Integrations/Slim/Latest/CommonScenariosTest.php b/tests/Integrations/Slim/Latest/CommonScenariosTest.php
index 2ab60ff6f8..e801ed8b35 100644
--- a/tests/Integrations/Slim/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Slim/Latest/CommonScenariosTest.php
@@ -122,7 +122,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         $this->wrapMiddleware([
                             SpanAssertion::build(
@@ -151,7 +150,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         $this->wrapMiddleware([
                             SpanAssertion::build(
@@ -189,7 +187,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])
                     ->setError(null, null)
                     ->withChildren([
@@ -224,7 +221,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/parameterized/{value}',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{value}',
                     ])->withChildren([
                         $this->wrapMiddleware([
                             SpanAssertion::build(
diff --git a/tests/Integrations/Slim/V3_12/CommonScenariosTest.php b/tests/Integrations/Slim/V3_12/CommonScenariosTest.php
index 8509d73fd8..b97d16527f 100644
--- a/tests/Integrations/Slim/V3_12/CommonScenariosTest.php
+++ b/tests/Integrations/Slim/V3_12/CommonScenariosTest.php
@@ -59,7 +59,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         SpanAssertion::build(
                             'slim.route.controller',
@@ -85,7 +84,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         SpanAssertion::build(
                             'slim.route.controller',
@@ -121,7 +119,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])->setError(null, null)
                         ->withChildren([
                             SpanAssertion::build(
@@ -150,7 +147,6 @@ public function provideSpecs()
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'slim',
                         Tag::HTTP_ROUTE => '/parameterized/{value}',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{value}',
                     ])->withChildren([
                         SpanAssertion::build(
                             'slim.route.controller',
diff --git a/tests/Integrations/Symfony/Latest/CommonScenariosTest.php b/tests/Integrations/Symfony/Latest/CommonScenariosTest.php
index 0a30131775..f7a1571c7a 100644
--- a/tests/Integrations/Symfony/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/Latest/CommonScenariosTest.php
@@ -74,7 +74,6 @@ public function provideSpecs()
                         'http.status_code' => '200',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'symfony',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     ])->withChildren([
                         SpanAssertion::exists('symfony.httpkernel.kernel.handle')
                         ->withChildren([
@@ -114,7 +113,6 @@ public function provideSpecs()
                         'http.status_code' => '200',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'symfony',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                     ])->withChildren([
                         SpanAssertion::exists('symfony.kernel.terminate'),
                         SpanAssertion::exists('symfony.httpkernel.kernel.handle')->withChildren([
@@ -161,7 +159,6 @@ public function provideSpecs()
                         'http.status_code' => '500',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'symfony',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                     ])
                     ->setError('Exception', 'An exception occurred')
                     ->withExistingTagsNames(['error.stack'])
diff --git a/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php b/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php
index 7b14922710..67aa59f88e 100644
--- a/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V4_4/CommonScenariosTest.php
@@ -56,7 +56,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -98,7 +97,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -147,7 +145,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php
index 66635c56d1..ccf749e2c2 100644
--- a/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V4_4/TraceSearchConfigTest.php
@@ -43,7 +43,6 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php b/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php
index b7bfd5a222..88ae9321a3 100644
--- a/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V5_0/CommonScenariosTest.php
@@ -56,7 +56,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -98,7 +97,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -147,7 +145,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php
index 54b312ba43..7c9cbfee07 100644
--- a/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V5_0/TraceSearchConfigTest.php
@@ -43,7 +43,6 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php b/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php
index d53ab79678..66558d8259 100644
--- a/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V5_1/CommonScenariosTest.php
@@ -56,7 +56,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -98,7 +97,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -147,7 +145,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php
index cb489e54d7..5044eafd65 100644
--- a/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V5_1/TraceSearchConfigTest.php
@@ -43,7 +43,6 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php b/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php
index 9043861731..b3df1fbe33 100644
--- a/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V5_2/CommonScenariosTest.php
@@ -56,7 +56,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -96,7 +95,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -143,7 +141,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php
index 57fa72db8d..1a622ae42b 100644
--- a/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V5_2/TraceSearchConfigTest.php
@@ -43,7 +43,6 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php b/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php
index 4dd7b39311..09c7927a95 100644
--- a/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V6_2/CommonScenariosTest.php
@@ -56,7 +56,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -96,7 +95,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -143,7 +141,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php b/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php
index 7a9d8e90a1..aaf2f4acc8 100644
--- a/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php
+++ b/tests/Integrations/Symfony/V6_2/TraceSearchConfigTest.php
@@ -43,7 +43,6 @@ public function testScenario()
                     'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                     'symfony.route.name' => 'simple',
                     'http.route' => '/simple',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                     'http.method' => 'GET',
                     'http.url' => 'http://localhost/simple',
                     'http.status_code' => '200',
diff --git a/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php b/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php
index 6b71b4139f..9d80fac281 100644
--- a/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php
+++ b/tests/Integrations/Symfony/V7_3/CommonScenariosTest.php
@@ -69,7 +69,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleAction',
                         'symfony.route.name' => 'simple',
                         'http.route' => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -109,7 +108,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@simpleViewAction',
                         'symfony.route.name' => 'simple_view',
                         'http.route' => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/simple_view?key=value&<redacted>',
                         'http.status_code' => '200',
@@ -156,7 +154,6 @@ public function provideSpecs()
                         'symfony.route.action' => 'App\Controller\CommonScenariosController@errorAction',
                         'symfony.route.name' => 'error',
                         'http.route' => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         'http.method' => 'GET',
                         'http.url' => 'http://localhost/error?key=value&<redacted>',
                         'http.status_code' => '500',
diff --git a/tests/Integrations/Yii/Latest/CommonScenariosTest.php b/tests/Integrations/Yii/Latest/CommonScenariosTest.php
index 8a8509739a..62410148e3 100644
--- a/tests/Integrations/Yii/Latest/CommonScenariosTest.php
+++ b/tests/Integrations/Yii/Latest/CommonScenariosTest.php
@@ -59,7 +59,6 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionIndex',
                         'app.route.path' => '/simple',
                         Tag::HTTP_ROUTE => '/simple',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])->withChildren([
@@ -104,7 +103,6 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionView',
                         'app.route.path' => '/simple_view',
                         Tag::HTTP_ROUTE => '/simple_view',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/simple_view',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])->withChildren([
@@ -152,7 +150,6 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionError',
                         'app.route.path' => '/error',
                         Tag::HTTP_ROUTE => '/error',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/error',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])
@@ -225,7 +222,6 @@ public function provideSpecs()
                         'app.endpoint' => 'app\controllers\SimpleController::actionParameterized',
                         'app.route.path' => '/parameterized/:value',
                         Tag::HTTP_ROUTE => '/parameterized/:value',
-                        Tag::APPSEC_NORMALIZED_ROUTE => '/parameterized/{value}',
                         Tag::SPAN_KIND => "server",
                         Tag::COMPONENT => "yii",
                     ])->withChildren([
diff --git a/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php b/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php
index 7059955484..7f78b32737 100644
--- a/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php
+++ b/tests/Integrations/Yii/Latest/LazyLoadingIntegrationsFromYiiTest.php
@@ -44,7 +44,6 @@ public function testRootIndexRoute()
                     Tag::HTTP_STATUS_CODE => '200',
                     'app.route.path' => '/site/index',
                     Tag::HTTP_ROUTE => '/site/index',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/site/index',
                     'app.endpoint' => 'app\controllers\SiteController::actionIndex',
                     Tag::SPAN_KIND => "server",
                     Tag::COMPONENT => "yii",
diff --git a/tests/Integrations/Yii/Latest/ModuleTest.php b/tests/Integrations/Yii/Latest/ModuleTest.php
index 201297d691..8cadc7e3b8 100644
--- a/tests/Integrations/Yii/Latest/ModuleTest.php
+++ b/tests/Integrations/Yii/Latest/ModuleTest.php
@@ -43,7 +43,6 @@ public function testGet()
                     Tag::HTTP_STATUS_CODE => '200',
                     'app.route.path' => '/forum/:state/:city/:neighborhood',
                     Tag::HTTP_ROUTE => '/forum/:state/:city/:neighborhood',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/forum/{state}/{city}/{neighborhood}',
                     'app.endpoint' => 'app\modules\forum\controllers\ModuleController::actionView',
                     Tag::SPAN_KIND => "server",
                     Tag::COMPONENT => "yii",
diff --git a/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php b/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php
index e5076bea22..82a4af944c 100644
--- a/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php
+++ b/tests/Integrations/Yii/Latest/ParameterizedRouteTest.php
@@ -43,7 +43,6 @@ public function testGet()
                     Tag::HTTP_STATUS_CODE => '200',
                     'app.route.path' => '/homes/:state/:city/:neighborhood',
                     Tag::HTTP_ROUTE => '/homes/:state/:city/:neighborhood',
-                    Tag::APPSEC_NORMALIZED_ROUTE => '/homes/{state}/{city}/{neighborhood}',
                     'app.endpoint' => 'app\controllers\HomesController::actionView',
                     Tag::SPAN_KIND => "server",
                     Tag::COMPONENT => "yii",
diff --git a/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json b/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json
index fce7aa85a4..94f4baa203 100644
--- a/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json
+++ b/tests/snapshots/integrations.code_igniter.v3_1.no_ci_controller_test.test_scenario_health_check.json
@@ -13,7 +13,6 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "health_check/ping",
-      "_dd.appsec.normalized_route": "/health_check/ping",
       "http.status_code": "200",
       "http.url": "http://localhost/health_check/ping",
       "runtime-id": "ca127e85-a20d-46aa-b510-07e9077a14c9",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json
index 97202ca6fb..1da3301fe8 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_parameterized.json
@@ -14,7 +14,6 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "parameterized/(:any)",
-      "_dd.appsec.normalized_route": "/parameterized/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/parameterized/paramValue",
       "runtime-id": "26ab24e6-051f-4e1f-9adf-3d609bef6946",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json
index bfc1072c2a..6f87498651 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_return_string.json
@@ -14,7 +14,6 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "26ab24e6-051f-4e1f-9adf-3d609bef6946",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json
index 8fa1be20b5..5170c9dbe3 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route.json
@@ -13,7 +13,6 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "does_not_exist",
-      "_dd.appsec.normalized_route": "/does_not_exist",
       "http.status_code": "404",
       "http.url": "http://localhost/does_not_exist?key=value&<redacted>",
       "runtime-id": "232799b0-3a18-4d64-9c97-4f6b441bb91e",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json
index 2939c1bed8..c50a1bd1bf 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_to_missing_route_cgi.json
@@ -13,7 +13,6 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "does_not_exist",
-      "_dd.appsec.normalized_route": "/does_not_exist",
       "http.status_code": "200",
       "http.url": "http://localhost/does_not_exist?key=value&<redacted>",
       "runtime-id": "0caac976-2232-42e0-a186-9f73b4c27f50",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json
index f2fde56386..c89ca53ba1 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception.json
@@ -18,7 +18,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "91489364-94f6-4030-b3ed-5df886a158a0",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json
index ace85d9412..49e57af64c 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_exception_cgi.json
@@ -18,7 +18,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "0caac976-2232-42e0-a186-9f73b4c27f50",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json
index 092ebddb3c..f1c4002d99 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.common_scenarios_test.test_scenario_get_with_view.json
@@ -14,7 +14,6 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "26ab24e6-051f-4e1f-9adf-3d609bef6946",
diff --git a/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json b/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json
index f1d5e75c6b..fb342972d7 100644
--- a/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json
+++ b/tests/snapshots/tests.integrations.code_igniter.v3_1.exit_test.test_scenario_exit.json
@@ -14,7 +14,6 @@
       "component": "codeigniter",
       "http.method": "GET",
       "http.route": "exits",
-      "_dd.appsec.normalized_route": "/exits",
       "http.status_code": "200",
       "http.url": "http://localhost/exits",
       "runtime-id": "de8ed04e-02e4-40ef-be2a-20aeeb1398ef",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
index 395db3b805..781cebdb29 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest2xx.json
@@ -12,7 +12,6 @@
       "component": "laminas",
       "http.method": "POST",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
-      "_dd.appsec.normalized_route": "/datadog-rest-service",
       "http.status_code": "201",
       "http.url": "http://localhost/datadog-rest-service",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
index a4be1a9090..bcd9fe5695 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest4xx.json
@@ -12,7 +12,6 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
-      "_dd.appsec.normalized_route": "/datadog-rest-service/{datadog_rest_service_id}",
       "http.status_code": "405",
       "http.url": "http://localhost/datadog-rest-service/1",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
index 90a025e6b1..b12796c239 100644
--- a/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
+++ b/tests/snapshots/tests.integrations.laminas.api_tools.latest.rest_test.test_scenario_rest5xx.json
@@ -16,7 +16,6 @@
       "error.type": "Error",
       "http.method": "GET",
       "http.route": "[/v:version]/datadog-rest-service[/:datadog_rest_service_id]",
-      "_dd.appsec.normalized_route": "/datadog-rest-service/{datadog_rest_service_id}",
       "http.status_code": "500",
       "http.url": "http://localhost/datadog-rest-service/42",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json
index 54850a8a70..1bdb15085f 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_return_string.json
@@ -12,7 +12,6 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple[/:key][/:pwd]",
-      "_dd.appsec.normalized_route": "/simple",
       "laminas.route.name": "simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json
index 891908b444..378a177110 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_exception.json
@@ -16,7 +16,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "/error[/:key][/:pwd]",
-      "_dd.appsec.normalized_route": "/error",
       "laminas.route.name": "error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json
index 601c5b1924..2d16a69aa4 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.latest.common_scenarios_test.test_scenario_get_with_view.json
@@ -12,7 +12,6 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple_view[/:key][/:pwd]",
-      "_dd.appsec.normalized_route": "/simple_view",
       "laminas.route.name": "simpleView",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json
index b789c970e7..1095152bce 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple[/:key][/:pwd]",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json
index fe7fccb895..b7e009b663 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "/error[/:key][/:pwd]",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json
index b0b11348c6..901042e3de 100644
--- a/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laminas.mvc.v3_3.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laminas",
       "http.method": "GET",
       "http.route": "/simple_view[/:key][/:pwd]",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "http.version": "1.1",
diff --git a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json
index 89f152f852..30a75fbd36 100644
--- a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json
+++ b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy.json
@@ -36,7 +36,6 @@
          "env": "local-test",
          "http.method": "GET",
          "http.route": "simple",
-         "_dd.appsec.normalized_route": "/simple",
          "http.status_code": "200",
          "http.url": "http://localhost/simple?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json
index cab7e2f236..1d07dbb615 100644
--- a/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.apigw_test.test_laravel_inferred_proxy_exception.json
@@ -44,7 +44,6 @@
          "error.type": "Exception",
          "http.method": "GET",
          "http.route": "error",
-         "_dd.appsec.normalized_route": "/error",
          "http.status_code": "500",
          "http.url": "http://localhost/error?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json
index d5258d457d..8a232b9230 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json
index de30ef1d7f..8f1d421bec 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json
index 93a4818e62..ac0e27db47 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_ignored_exception.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "ignored_exception",
-      "_dd.appsec.normalized_route": "/ignored_exception",
       "http.status_code": "500",
       "http.url": "http://localhost/ignored_exception?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@ignored_exception",
diff --git a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json
index 61b5dc998c..2f0e9cc11a 100644
--- a/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.latest.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json
index 1a8fcb1ca3..b272893f43 100644
--- a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json
+++ b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy.json
@@ -41,7 +41,6 @@
          "http.request.headers.x-dd-proxy-request-time-ms": "1739261376000",
          "http.request.headers.x-dd-proxy-stage": "aws-prod",
          "http.route": "simple",
-         "_dd.appsec.normalized_route": "/simple",
          "http.status_code": "200",
          "http.url": "http://localhost/simple?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json
index 70fc8fc131..419fe5954d 100644
--- a/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.octane.apigw_test.test_inferred_proxy_exception.json
@@ -49,7 +49,6 @@
          "http.request.headers.x-dd-proxy-request-time-ms": "1739261376000",
          "http.request.headers.x-dd-proxy-stage": "aws-prod",
          "http.route": "error",
-         "_dd.appsec.normalized_route": "/error",
          "http.status_code": "500",
          "http.url": "http://localhost/error?key=value&<redacted>",
          "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json
index d9cdc8ec82..4f0313c6f4 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json
index 873d1872a2..83bad2e3d5 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json
index fb9482ebd8..3233a40a35 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_ignored_exception.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "ignored_exception",
-      "_dd.appsec.normalized_route": "/ignored_exception",
       "http.status_code": "408",
       "http.url": "http://localhost/ignored_exception?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@ignored_exception",
diff --git a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json
index 4f9f5b699b..112ac020a3 100644
--- a/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v10_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json
index 390c85885a..129eb9bf54 100644
--- a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json
index a445e4875c..2099de6018 100644
--- a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json
index bd6031cd01..680f92fc80 100644
--- a/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v11_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json
index 2d6ac0c4bb..22efd53562 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_dynamic_route.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "dynamic_route/{param01}/static/{param02?}",
-      "_dd.appsec.normalized_route": "/dynamic_route/{param01}/static/{param02}",
       "http.status_code": "200",
       "http.url": "http://localhost/dynamic_route/dynamic01/static/dynamic02",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@dynamicRoute",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json
index 032bf611c9..70b03dbba7 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json
index 3ee7c0576c..2934d7bfe6 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json
index f3c5e198fe..20a7a2d853 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_7.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json
index 5e9c5e4635..3e1774ade8 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_dynamic_route.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "dynamic_route/{param01}/static/{param02?}",
-      "_dd.appsec.normalized_route": "/dynamic_route/{param01}/static/{param02}",
       "http.status_code": "200",
       "http.url": "http://localhost/dynamic_route/dynamic01/static/dynamic02",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@dynamicRoute",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json
index 3ff3e63d55..ede2a71d26 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json
index c0ea78043e..bd6e68a2a2 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json
index 170f307d40..e6dd0b6f68 100644
--- a/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v5_8.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json
index a30102ddd3..e2ee39ae9c 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_dynamic_route.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "dynamic_route/{param01}/static/{param02?}",
-      "_dd.appsec.normalized_route": "/dynamic_route/{param01}/static/{param02}",
       "http.status_code": "200",
       "http.url": "http://localhost/dynamic_route/dynamic01/static/dynamic02",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@dynamicRoute",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json
index 091d23af98..1ad5cb004a 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json
index 056926e484..0d1c1ee654 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json
index 6f765f19df..de7b4288e7 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json b/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json
index 668f86f62c..66ee49f491 100644
--- a/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json
+++ b/tests/snapshots/tests.integrations.laravel.v8_x.queue_test.test_broadcast.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "queue/broadcast",
-      "_dd.appsec.normalized_route": "/queue/broadcast",
       "http.status_code": "200",
       "http.url": "http://localhost/queue/broadcast",
       "laravel.route.action": "App\\Http\\Controllers\\QueueTestController@broadcast",
diff --git a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json
index a3ee9d2007..01e28d6b43 100644
--- a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple",
-      "_dd.appsec.normalized_route": "/simple",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple",
diff --git a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json
index 171e7435f4..c822b1957a 100644
--- a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "error",
-      "_dd.appsec.normalized_route": "/error",
       "http.status_code": "500",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@error",
diff --git a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json
index 0f35b0875e..34138c0c85 100644
--- a/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.laravel.v9_x.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "laravel",
       "http.method": "GET",
       "http.route": "simple_view",
-      "_dd.appsec.normalized_route": "/simple_view",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "laravel.route.action": "App\\Http\\Controllers\\CommonSpecsController@simple_view",
diff --git a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json
index 8a685d109e..f57a677294 100644
--- a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_failure.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
-      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "0f36db1f-90a1-409a-9b85-7d0bc2c54d36",
diff --git a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json
index bb43acbd09..380f76930f 100644
--- a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_success.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "0f36db1f-90a1-409a-9b85-7d0bc2c54d36",
diff --git a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json
index 8cbea890d9..197943a03a 100644
--- a/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.latest.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "0f36db1f-90a1-409a-9b85-7d0bc2c54d36",
diff --git a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json
index 2cd1b9dc59..d5149dfdc8 100644
--- a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_failure.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
-      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "ca852dce-8c96-4b3f-8357-2b46cce83f8d",
diff --git a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json
index c23f76a73a..022b59c7af 100644
--- a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_success.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "ca852dce-8c96-4b3f-8357-2b46cce83f8d",
diff --git a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json
index b212dfc624..d4041b3169 100644
--- a/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v4_4.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "ca852dce-8c96-4b3f-8357-2b46cce83f8d",
diff --git a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json
index cc9f7d5392..b855eb677e 100644
--- a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_failure.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
-      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "1550b663-0773-449e-8a5f-22376e62447d",
diff --git a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json
index 61f46f02b9..98689bf55a 100644
--- a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_success.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "1550b663-0773-449e-8a5f-22376e62447d",
diff --git a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
index bc0c8fb41a..63c6603940 100644
--- a/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v5_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "1550b663-0773-449e-8a5f-22376e62447d",
diff --git a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json
index 7d3f4028b2..2f7394d7f4 100644
--- a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_failure.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
-      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "8d575e05-da62-4382-a61a-a3c04f3e8cad",
diff --git a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json
index 3f1a8a49aa..1ae71e1e12 100644
--- a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_success.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "8d575e05-da62-4382-a61a-a3c04f3e8cad",
diff --git a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
index 47ece10b90..96256186c7 100644
--- a/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v6_2.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "8d575e05-da62-4382-a61a-a3c04f3e8cad",
diff --git a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json
index ffe507c94f..ac008361f1 100644
--- a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json
+++ b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_failure.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/fail",
-      "_dd.appsec.normalized_route": "/lucky/fail",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/fail",
       "runtime-id": "20ef259c-a7ba-47ab-8ea5-bff0fefacb1d",
diff --git a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json
index 1b3cbdf756..b4ea6c6493 100644
--- a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json
+++ b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_success.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "20ef259c-a7ba-47ab-8ea5-bff0fefacb1d",
diff --git a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json
index f60f2960cf..0327d98741 100644
--- a/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json
+++ b/tests/snapshots/tests.integrations.symfony.v7_3.messenger_test.test_async_with_tracer_disabled_on_consume.json
@@ -13,7 +13,6 @@
       "component": "symfony",
       "http.method": "GET",
       "http.route": "/lucky/number",
-      "_dd.appsec.normalized_route": "/lucky/number",
       "http.status_code": "200",
       "http.url": "http://localhost/lucky/number",
       "runtime-id": "20ef259c-a7ba-47ab-8ea5-bff0fefacb1d",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 807423f1bb..a94467e5ad 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index d52a3da5ef..942275e999 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index 56709760ea..4cea0bce0d 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "(.?.+?)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "b4ee1995-4afb-4457-9e9d-b361460bfa16",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
index 04857a7ad7..34e87afcbd 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
index d03c59fa4b..ad6b699998 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
index 0aed57bd0b..3da297ba27 100644
--- a/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v4_8.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "(.?.+?)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "8fdcf6ef-7cd9-4910-b426-c7c9809f3dd4",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 54ceed8702..5fe007192c 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index dab6d17b85..323e0bbfd2 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index ddbfe19200..f74b08cfaf 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "4ad4333f-2e0b-4278-a6f7-2182e7771b34",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
index 97475b3c3e..b2cc305f4f 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
index 672fe1ef8f..310b142ac5 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
index 0d0e03ec26..ca8d5fe134 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_5.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "f188c752-a672-4955-97f7-e41a31d13fe7",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 99517450a9..ebfef74a26 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 10805214ae..27319620a3 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index 54424a79ca..683d022d4e 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "896f86bc-7139-44f3-a99f-ed35e643f726",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
index b1542c0338..a2f281d70d 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
index dadb6830bc..c982920760 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
index 67e6a278f1..671eb3f7d1 100644
--- a/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v5_9.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "4c46007f-c934-41aa-bcbe-c48ecee2d4cc",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
index 0b9ee6a9b6..d965665100 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
index 3848d91ec6..10673208e8 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
index f4e388bcd0..e055001b0c 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_callbacks_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "333590aa-cf9b-4804-9dde-1ac7b59c09ab",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
index 6af081bf5b..cfbeb419d9 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_return_string.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
index 0c960dd3fc..76919c4227 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_exception.json
@@ -17,7 +17,6 @@
       "error.type": "Exception",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/error?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",
diff --git a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
index 02a24be7bb..4b9c200068 100644
--- a/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
+++ b/tests/snapshots/tests.integrations.word_press.v6_1.common_scenarios_test.test_scenario_get_with_view.json
@@ -13,7 +13,6 @@
       "component": "wordpress",
       "http.method": "GET",
       "http.route": "([^/]+)(?:/([0-9]+))?/?$",
-      "_dd.appsec.normalized_route": "/{param1}",
       "http.status_code": "200",
       "http.url": "http://localhost/simple_view?key=value&<redacted>",
       "runtime-id": "df54db4d-0cc0-4b1c-9fce-8004a54aa78b",

From 84c69121b04cf2377b73965f69355561306e1768 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 13:09:47 +0200
Subject: [PATCH 32/54] Improve route generation

---
 .../php/integration/Laminas33Tests.groovy     |  15 +
 .../php/integration/Laravel8xTests.groovy     |  49 ++-
 .../php/integration/Symfony62Tests.groovy     |  21 +-
 .../CakePHP/CakePHPIntegration.php            |  15 +-
 .../CodeIgniter/V2/CodeIgniterIntegration.php |  20 --
 .../Laravel/LaravelIntegration.php            |  69 +++-
 .../Integrations/Slim/SlimIntegration.php     |  68 +---
 .../Symfony/SymfonyIntegration.php            |  33 +-
 .../Integrations/Yii/YiiIntegration.php       |  13 -
 src/DDTrace/Util/RouteNormalizer.php          | 305 ++++++++----------
 .../Application/config/module.config.php      |  13 +
 .../Laravel/Version_8_x/routes/web.php        |   8 +
 .../src/Controller/HomeController.php         |   8 +
 .../CodeIgniter/V2_2/CommonScenariosTest.php  |   2 +-
 .../CodeIgniter/V2_2/ExitTest.php             |   2 +-
 .../Util/Normalizer/RouteNormalizerTest.php   | 118 -------
 16 files changed, 327 insertions(+), 432 deletions(-)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
index e7bc4692cd..1aef791790 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
@@ -139,6 +139,9 @@ class Laminas33Tests {
         assert endpoints.find {
             it.path == '/any-verb' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /any-verb'
         } != null
+        assert endpoints.find {
+            it.path == '/user/:user-id' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /user/:user-id'
+        } != null
     }
 
     @Test
@@ -342,4 +345,16 @@ class Laminas33Tests {
         assert trace.first().meta.'http.route' == '/application[/:action]'
         assert trace.first().meta.'_dd.appsec.normalized_route' == '/application/{action}'
     }
+
+    @Test
+    @Order(13)
+    void 'hyphenated param name in segment route normalizes correctly'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/user/42').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+        assert trace.first().meta.'http.route' == '/user/:user-id'
+        assert trace.first().meta.'_dd.appsec.normalized_route' == '/user/{user-id}'
+    }
 }
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
index 2d568eb90e..dcf633a41d 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
@@ -212,11 +212,58 @@ class Laravel8xTests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 27
+        assert endpoints.size() == 29
         assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null
         assert endpoints.find { it.path == 'login/auth' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET login/auth' } != null
         assert endpoints.find { it.path == 'login/signup' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET login/signup' } != null
         assert endpoints.find { it.path == 'dynamic-path/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET dynamic-path/{param01}' } != null
         assert endpoints.find { it.path == 'api/user' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET api/user' } != null
+        assert endpoints.find { it.path == 'normalized-optional/{value?}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET normalized-optional/{value?}' } != null
+        assert endpoints.find { it.path == 'normalized-default/{format?}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET normalized-default/{format?}' } != null
+    }
+
+    @Test
+    @Order(10)
+    void 'optional param present produces correct normalized route'() {
+        HttpRequest req = container.buildReq('/normalized-optional/hello').GET().build()
+        Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+            assert re.body() == 'hello'
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == 'normalized-optional/{value?}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized-optional/{value}'
+    }
+
+    @Test
+    @Order(11)
+    void 'optional param absent produces correct normalized route'() {
+        HttpRequest req = container.buildReq('/normalized-optional').GET().build()
+        Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+            assert re.body() == 'absent'
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == 'normalized-optional/{value?}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized-optional'
+    }
+
+    @Test
+    @Order(12)
+    void 'defaulted optional absent from URL produces normalized route without the param'() {
+        // The route uses ->defaults('format', 'html'). When the URL has no {format?} segment,
+        // Laravel injects 'html' into $route->parameters() — but the param is absent from the URL.
+        // The normalized route must not include {format} in this case.
+        HttpRequest req = container.buildReq('/normalized-default').GET().build()
+        Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+            assert re.body() == 'html'
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == 'normalized-default/{format?}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized-default'
     }
 }
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
index c0f23c0589..51515f2f97 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
@@ -186,6 +186,8 @@ class Symfony62Tests {
             assert re.body().contains('are_endpoints_collected: false')
         }
     }
+
+    @Test
     @Order(3)
     void 'Endpoints are collected after the first request to framework'() {
         HttpRequest req = container.buildReq('/outside_of_framework.php').GET().build()
@@ -194,6 +196,8 @@ class Symfony62Tests {
             assert re.body().contains('are_endpoints_collected: true')
         }
     }
+
+    @Test
     @Order(2)
     void 'Endpoints are sent'() {
         def trace = container.traceFromRequest('/') { HttpResponse<InputStream> resp ->
@@ -209,7 +213,7 @@ class Symfony62Tests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 14
+        assert endpoints.size() == 15
         assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null
         assert endpoints.find { it.path == '/dynamic-path/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /dynamic-path/{param01}' } != null
         assert endpoints.find { it.path == '/caminho-dinamico/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /caminho-dinamico/{param01}' } != null
@@ -224,5 +228,20 @@ class Symfony62Tests {
         assert endpoints.find { it.path == '/lucky/number' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /lucky/number' } != null
         assert endpoints.find { it.path == '/lucky/fail' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /lucky/fail' } != null
         assert endpoints.find { it.path == '/_error/{code}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /_error/{code}.{_format}' } != null
+        assert endpoints.find { it.path == '/article/{slug}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /article/{slug}.{_format}' } != null
+    }
+
+    @Test
+    @Order(11)
+    void 'mixed segment route normalizes both params into one brace group'() {
+        HttpRequest req = container.buildReq('/article/my-post.html').GET().build()
+        Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+            assert re.body() == 'my-post.html'
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == '/article/{slug}.{_format}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/article/{slug+_format}'
     }
 }
diff --git a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
index b07a586f17..9adf769112 100644
--- a/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
+++ b/src/DDTrace/Integrations/CakePHP/CakePHPIntegration.php
@@ -71,20 +71,7 @@ public static function init(): int
 
             $rootSpan = \DDTrace\root_span();
             if ($rootSpan !== null) {
-                $template = $app->template;
-                $rootSpan->meta[Tag::HTTP_ROUTE] = $template;
-                if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                    $normalizedRoute = \DDTrace\routing_cache_get($template);
-                    if ($normalizedRoute === false) {
-                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCakePHP($template);
-                        if ($normalizedRoute !== null) {
-                            \DDTrace\routing_cache_set($template, $normalizedRoute);
-                        }
-                    }
-                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                    }
-                }
+                $rootSpan->meta[Tag::HTTP_ROUTE] = $app->template;
             }
         };
 
diff --git a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
index 8c98cad9de..15c8f684f6 100644
--- a/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
+++ b/src/DDTrace/Integrations/CodeIgniter/V2/CodeIgniterIntegration.php
@@ -222,23 +222,6 @@ function (SpanData $span, $args, $retval, $ex) use ($adapter, $service) {
     /*
      * Replicate CodeIgniter's route parsing, as matching key is never stored or returned in the framework.
      */
-    private static function setNormalizedRoute($rootSpan, string $pattern) {
-        if (!function_exists('\datadog\appsec\is_enabled') || !\datadog\appsec\is_enabled()) {
-            return;
-        }
-        $cacheKey = $pattern;
-        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
-        if ($normalizedRoute === false) {
-            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromCodeIgniter($pattern);
-            if ($normalizedRoute !== null) {
-                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
-            }
-        }
-        if ($normalizedRoute !== null && $normalizedRoute !== false) {
-            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-        }
-    }
-
     private static function setHttpRoute($router, $rootSpan) {
         // Turn the segment array into a URI string
         $uri = implode('/', $router->uri->segments);
@@ -247,7 +230,6 @@ private static function setHttpRoute($router, $rootSpan) {
         if (isset($router->routes[$uri]))
         {
             $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
-            self::setNormalizedRoute($rootSpan, $uri);
             return;
         }
 
@@ -262,7 +244,6 @@ private static function setHttpRoute($router, $rootSpan) {
             if (preg_match('#^'.$key.'$#', $uri))
             {
                 $rootSpan->meta[Tag::HTTP_ROUTE] = $origKey;
-                self::setNormalizedRoute($rootSpan, $origKey);
                 return;
             }
         }
@@ -270,6 +251,5 @@ private static function setHttpRoute($router, $rootSpan) {
         // If we got this far it means we didn't encounter a
         // matching route so we'll set the site default route
         $rootSpan->meta[Tag::HTTP_ROUTE] = $uri;
-        self::setNormalizedRoute($rootSpan, $uri);
     }
 }
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index 66155cc658..7c0bfe80e9 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -142,12 +142,32 @@ static function ($This, $scope, $args, $route) {
                     $httpRoute = $route->uri();
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                        $normalizedRoute = \DDTrace\routing_cache_get($httpRoute);
+                        $allParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
+                        if (strpos($httpRoute, '?}') !== false) {
+                            // For routes with optional params, filter out default-injected values
+                            // (e.g. ->defaults('format', 'html')) that weren't present in the URL.
+                            $matchedParams = self::laravelUrlMatchedParams(
+                                $httpRoute, $request->path(), $allParams
+                            );
+                            // Cache key encodes which optional params are present
+                            preg_match_all('/\{([^}]+)\?\}/', $httpRoute, $_opts);
+                            $_present = [];
+                            foreach ($_opts[1] as $_opt) {
+                                if (array_key_exists($_opt, $matchedParams)) {
+                                    $_present[] = $_opt;
+                                }
+                            }
+                            $cacheKey = $httpRoute . '#' . implode(',', $_present);
+                            unset($_opts, $_present, $_opt);
+                        } else {
+                            $matchedParams = $allParams;
+                            $cacheKey = $httpRoute;
+                        }
+                        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                         if ($normalizedRoute === false) {
-                            $matchedParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
                             $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaravel($httpRoute, $matchedParams);
                             if ($normalizedRoute !== null) {
-                                \DDTrace\routing_cache_set($httpRoute, $normalizedRoute);
+                                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
                             }
                         }
                         if ($normalizedRoute !== null && $normalizedRoute !== false) {
@@ -766,4 +786,47 @@ public static function normalizeRouteName($routeName)
 
         return $routeName;
     }
+
+    /**
+     * Determine which Laravel optional params were actually present in the URL path
+     * (vs. injected as route defaults via ->defaults()).
+     *
+     * Walks the route URI template and URL path in parallel; an optional param is only
+     * included in the result when the URL has a non-empty segment at that position.
+     *
+     * @param string $routeUri  From $route->uri(), e.g. "normalized-default/{format?}"
+     * @param string $urlPath   From $request->path(), e.g. "normalized-default"
+     * @param array  $allParams From $route->parameters()
+     * @return array
+     */
+    private static function laravelUrlMatchedParams(string $routeUri, string $urlPath, array $allParams): array
+    {
+        $routeSegs = explode('/', trim($routeUri, '/'));
+        $urlSegs   = explode('/', trim($urlPath, '/'));
+        $matched   = [];
+        $urlIdx    = 0;
+
+        foreach ($routeSegs as $seg) {
+            if (preg_match('/^\{([^}?]+)\?\}$/', $seg, $m)) {
+                // Optional param — include only when URL has a segment at this position
+                if ($urlIdx < count($urlSegs) && $urlSegs[$urlIdx] !== '') {
+                    if (array_key_exists($m[1], $allParams)) {
+                        $matched[$m[1]] = $allParams[$m[1]];
+                    }
+                    $urlIdx++;
+                }
+            } elseif (preg_match('/^\{([^}]+)\}$/', $seg)) {
+                // Required param — always present
+                preg_match('/^\{([^}]+)\}$/', $seg, $m);
+                if (array_key_exists($m[1], $allParams)) {
+                    $matched[$m[1]] = $allParams[$m[1]];
+                }
+                $urlIdx++;
+            } else {
+                $urlIdx++;
+            }
+        }
+
+        return $matched;
+    }
 }
diff --git a/src/DDTrace/Integrations/Slim/SlimIntegration.php b/src/DDTrace/Integrations/Slim/SlimIntegration.php
index bff645e850..d135e66d81 100644
--- a/src/DDTrace/Integrations/Slim/SlimIntegration.php
+++ b/src/DDTrace/Integrations/Slim/SlimIntegration.php
@@ -75,24 +75,11 @@ static function ($errorMiddleware, $self, $args) use ($rootSpan, $integration) {
                         null,
                         static function ($router, $scope, $args, $return) use ($rootSpan) {
                             /** @var \Slim\Interfaces\RouteInterface $return */
-                            $pattern = $return->getPattern();
-                            $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
-                            if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                                $normalizedRoute = \DDTrace\routing_cache_get($pattern);
-                                if ($normalizedRoute === false) {
-                                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
-                                    if ($normalizedRoute !== null) {
-                                        \DDTrace\routing_cache_set($pattern, $normalizedRoute);
-                                    }
-                                }
-                                if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                                }
-                            }
+                            $rootSpan->meta[Tag::HTTP_ROUTE] = $return->getPattern();
 
                             if (dd_trace_env_config("DD_HTTP_SERVER_ROUTE_BASED_NAMING")) {
                                 $rootSpan->resource =
-                                    $_SERVER['REQUEST_METHOD'] . ' ' . ($return->getName() ?: $pattern);
+                                    $_SERVER['REQUEST_METHOD'] . ' ' . ($return->getName() ?: $return->getPattern());
                             }
                         }
                     );
@@ -105,20 +92,7 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                         static function ($router, $scope, $args, $return) use ($rootSpan) {
                             /** @var \Slim\Interfaces\RouteInterface $route */
                             $route = $return;
-                            $pattern = $route->getPattern();
-                            $rootSpan->meta[Tag::HTTP_ROUTE] = $pattern;
-                            if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                                $normalizedRoute = \DDTrace\routing_cache_get($pattern);
-                                if ($normalizedRoute === false) {
-                                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern);
-                                    if ($normalizedRoute !== null) {
-                                        \DDTrace\routing_cache_set($pattern, $normalizedRoute);
-                                    }
-                                }
-                                if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                                }
-                            }
+                            $rootSpan->meta[Tag::HTTP_ROUTE] = $route->getPattern();
                         }
                     );
                 }
@@ -157,46 +131,10 @@ static function ($router, $scope, $args, $return) use ($rootSpan) {
                                 $span->meta['slim.route.name'] = $routeName;
                                 $rootSpan->meta['slim.route.name'] = $routeName;
                             }
-                            // Refine normalized route now that matched params are available
-                            if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                                $matchedParams = method_exists($route, 'getArguments') ? ($route->getArguments() ?? []) : [];
-                                $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
-                                if ($pattern !== '') {
-                                    $urlPath = $request->getUri()->getPath();
-                                    $normalizedRoute = \DDTrace\routing_cache_get($pattern);
-                                    if ($normalizedRoute === false) {
-                                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
-                                        if ($normalizedRoute !== null) {
-                                            \DDTrace\routing_cache_set($pattern, $normalizedRoute);
-                                        }
-                                    }
-                                    if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                        $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                                    }
-                                }
-                            }
                         }
                     } else {
                         $rootSpan->meta['slim.route.controller'] = $callableName;
                         $span->name = 'slim.route.controller';
-                        // Refine normalized route now that matched params are available (Slim 3)
-                        if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                            $matchedParams = isset($args[3]) && is_array($args[3]) ? $args[3] : [];
-                            $pattern = isset($rootSpan->meta[Tag::HTTP_ROUTE]) ? $rootSpan->meta[Tag::HTTP_ROUTE] : '';
-                            if ($pattern !== '') {
-                                $urlPath = $request->getUri()->getPath();
-                                $normalizedRoute = \DDTrace\routing_cache_get($pattern);
-                                if ($normalizedRoute === false) {
-                                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSlim($pattern, $matchedParams, $urlPath);
-                                    if ($normalizedRoute !== null) {
-                                        \DDTrace\routing_cache_set($pattern, $normalizedRoute);
-                                    }
-                                }
-                                if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                                }
-                            }
-                        }
                     }
                 };
 
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index 9584e3cd65..bfb7a213c9 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -467,7 +467,7 @@ static function() {
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                        $matchedParams = self::inferSymfonyRouteParams($path, $request->getPathInfo());
+                        $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
                         $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path, $matchedParams);
                         if ($normalizedRoute !== null) {
                             $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
@@ -787,35 +787,4 @@ public static function injectActionInfo($event, $eventName, SpanData $requestSpa
         return true;
     }
 
-    /**
-     * Walk the path template and URL path together to determine which {param}
-     * placeholders were actually present in the URL (vs filled from route defaults).
-     * Each template segment is either static text or a single {param}; trailing
-     * params with no corresponding URL segment are considered absent.
-     *
-     * @return array Map of param name → URL value for params present in the URL
-     */
-    private static function inferSymfonyRouteParams(string $template, string $urlPath): array
-    {
-        $templateSegments = array_values(array_filter(explode('/', $template)));
-        $urlSegments      = array_values(array_filter(explode('/', $urlPath)));
-
-        $matched = [];
-        $urlIdx  = 0;
-
-        foreach ($templateSegments as $seg) {
-            if (preg_match('/^\{([a-zA-Z_][a-zA-Z0-9_]*)\}$/', $seg, $m)) {
-                if ($urlIdx < count($urlSegments)) {
-                    $matched[$m[1]] = $urlSegments[$urlIdx];
-                    $urlIdx++;
-                }
-                // else: param is beyond end of URL → absent (default-filled)
-            } else {
-                // Static segment — always advance the URL position
-                $urlIdx++;
-            }
-        }
-
-        return $matched;
-    }
 }
diff --git a/src/DDTrace/Integrations/Yii/YiiIntegration.php b/src/DDTrace/Integrations/Yii/YiiIntegration.php
index b9368921b7..91fa862d5f 100644
--- a/src/DDTrace/Integrations/Yii/YiiIntegration.php
+++ b/src/DDTrace/Integrations/Yii/YiiIntegration.php
@@ -156,19 +156,6 @@ function (SpanData $span, $args) use (&$firstController) {
 
                     $rootSpan->meta['app.route.path'] = $routePath;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $routePath;
-                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                        $cacheKey = $routePath;
-                        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
-                        if ($normalizedRoute === false) {
-                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromYii($routePath);
-                            if ($normalizedRoute !== null) {
-                                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
-                            }
-                        }
-                        if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                        }
-                    }
 
                     if (dd_trace_env_config("DD_HTTP_SERVER_ROUTE_BASED_NAMING")) {
                         $resourceName = \str_replace(
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 76bb2e96d8..eb790f6218 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -9,7 +9,8 @@ class RouteNormalizer
      * Normalize a Laravel route URI.
      *
      * @param string $routeUri     URI from $route->uri(), e.g. "/users/{id}/{format?}"
-     * @param array  $matchedParams Parameters from $route->parameters(); used to resolve optionals
+     * @param array  $matchedParams Parameters from $route->parameters(); used to resolve optionals.
+     *                              Note: includes framework-injected defaults; caller must exclude them.
      * @return string|null
      */
     public static function normalizeFromLaravel(string $routeUri, array $matchedParams = [])
@@ -17,20 +18,6 @@ public static function normalizeFromLaravel(string $routeUri, array $matchedPara
         return self::normalizeBraceRoute($routeUri, $matchedParams);
     }
 
-    /**
-     * Normalize a Slim route pattern.
-     *
-     * @param string      $pattern       Pattern from $route->getPattern(), e.g. "/users/{id:[0-9]+}"
-     * @param array       $matchedParams Matched params from $route->getArguments(); resolves optionals
-     * @param string|null $urlPath       Actual request path; used to resolve static-only optional
-     *                                   sections like [.json] that have no placeholder param
-     * @return string|null
-     */
-    public static function normalizeFromSlim(string $pattern, array $matchedParams = [], $urlPath = null)
-    {
-        return self::normalizeBraceRoute($pattern, $matchedParams, true, $urlPath);
-    }
-
     /**
      * Normalize a Symfony route path.
      *
@@ -43,8 +30,9 @@ public static function normalizeFromSymfony(string $path, $matchedParams = null)
     {
         if ($matchedParams !== null) {
             // Mark params absent from the URL as optional so normalizeBraceSegment drops them.
+            // Use [^}?:]+ to match any param name including UTF-8 characters.
             $path = preg_replace_callback(
-                '/\{([a-zA-Z_][a-zA-Z0-9_]*)\}/',
+                '/\{([^}?:]+)\}/',
                 static function ($m) use ($matchedParams) {
                     return array_key_exists($m[1], $matchedParams) ? $m[0] : '{' . $m[1] . '?}';
                 },
@@ -72,78 +60,19 @@ static function ($m) use ($matchedParams) {
     public static function normalizeFromLaminas(string $template, array $matchedParams = [], $urlPath = null)
     {
         $expanded = self::expandBracketOptionals($template, $matchedParams, ':', $urlPath);
-        $expanded = preg_replace('#/\*$#', '/{param1}', $expanded);
+
+        // Replace wildcard /* with a param name that doesn't collide with existing params
+        if (preg_match('#/\*$#', $expanded)) {
+            $wildcardName = self::uniqueParamName($expanded, ':');
+            $expanded = preg_replace('#/\*$#', '/{' . $wildcardName . '}', $expanded);
+        }
+
         // Segment routes use :param; Regex routes use %param% (spec format) — handle both.
         $braceFormat = self::colonParamsToBraces($expanded);
         $braceFormat = self::percentParamsToBraces($braceFormat);
         return self::normalizeBraceRoute($braceFormat, $matchedParams);
     }
 
-    /**
-     * Normalize a CakePHP route template.
-     *
-     * @param string $template Template from $app->template, e.g. "/articles/:id.:ext"
-     * @return string|null
-     */
-    public static function normalizeFromCakePHP(string $template)
-    {
-        $braceFormat = self::cakephpToBraces($template);
-        return self::normalizeBraceRoute($braceFormat, []);
-    }
-
-    /**
-     * Normalize a Yii route path containing :param placeholders.
-     *
-     * @param string $routePath Path from Url::toRoute() with colon placeholders
-     * @return string|null
-     */
-    public static function normalizeFromYii(string $routePath)
-    {
-        $braceFormat = self::colonParamsToBraces($routePath);
-        return self::normalizeBraceRoute($braceFormat, []);
-    }
-
-    /**
-     * Normalize a CodeIgniter V2 route pattern.
-     *
-     * CodeIgniter uses :any / :num wildcards and positional regex groups.
-     * Named parameters are not available, so placeholders param1, param2, … are used.
-     *
-     * @param string $route Route key from $router->routes, e.g. "blog/(:num)"
-     * @return string|null
-     */
-    public static function normalizeFromCodeIgniter(string $route)
-    {
-        $route = trim($route, '/');
-        if ($route === '') {
-            return '/';
-        }
-
-        $segments = explode('/', $route);
-        $normalizedSegments = [];
-        $paramIndex = 1;
-
-        foreach ($segments as $segment) {
-            if ($segment === '') {
-                continue;
-            }
-
-            $lower = strtolower($segment);
-            if (
-                $lower === ':any' || $lower === ':num' ||
-                $lower === '(:any)' || $lower === '(:num)'
-            ) {
-                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
-            } elseif (preg_match('/[()[\].*+?|^$\\\\]/', $segment) || strpos($segment, ':') !== false) {
-                $normalizedSegments[] = '{param' . $paramIndex++ . '}';
-            } else {
-                $normalizedSegments[] = self::encodeStaticSegment($segment);
-            }
-        }
-
-        return '/' . implode('/', $normalizedSegments);
-    }
-
     /**
      * Normalize a WordPress matched_rule (regex).
      *
@@ -194,7 +123,18 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
             }
 
             if (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
-                $groupCount = self::countCaptureGroups($segment);
+                // Extract static prefix before the first regex metacharacter
+                $prefixLen = strcspn($segment, '([{?*+|^$\\');
+                if ($prefixLen > 0) {
+                    $staticPart = rtrim(substr($segment, 0, $prefixLen), '/-._');
+                    if ($staticPart !== '') {
+                        $normalizedSegments[] = self::encodeStaticSegment($staticPart);
+                    }
+                }
+
+                $dynamicPart = substr($segment, $prefixLen);
+                $groupCount = self::countCaptureGroups($dynamicPart);
+
                 if ($groupCount === 0) {
                     if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
                         continue;
@@ -221,8 +161,8 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
     }
 
     /**
-     * Split a regex string by '/' but not inside character classes [...].
-     * Prevents [^/] from being split into two segments.
+     * Split a regex string by '/' but not inside character classes [...] or groups (...).
+     * Prevents [^/] and (?:/...) from being split into multiple segments.
      */
     private static function splitRegexBySlash(string $str): array
     {
@@ -230,6 +170,7 @@ private static function splitRegexBySlash(string $str): array
         $current = '';
         $len = strlen($str);
         $bracketDepth = 0;
+        $parenDepth = 0;
 
         for ($i = 0; $i < $len; $i++) {
             $c = $str[$i];
@@ -240,13 +181,19 @@ private static function splitRegexBySlash(string $str): array
                 continue;
             }
 
-            if ($c === '[') {
+            if ($c === '[' && $parenDepth === 0) {
                 $bracketDepth++;
                 $current .= $c;
             } elseif ($c === ']' && $bracketDepth > 0) {
                 $bracketDepth--;
                 $current .= $c;
-            } elseif ($c === '/' && $bracketDepth === 0) {
+            } elseif ($c === '(' && $bracketDepth === 0) {
+                $parenDepth++;
+                $current .= $c;
+            } elseif ($c === ')' && $parenDepth > 0 && $bracketDepth === 0) {
+                $parenDepth--;
+                $current .= $c;
+            } elseif ($c === '/' && $bracketDepth === 0 && $parenDepth === 0) {
                 $segments[] = $current;
                 $current = '';
             } else {
@@ -291,15 +238,10 @@ private static function countCaptureGroups(string $segment): int
 
     /**
      * Normalize a route that uses {param} notation.
-     *
-     * @param bool        $expandSquare When true, expand Slim-style [...] optional sections
-     * @param string|null $urlPath      Actual request path; forwarded to expandSquareBracketOptionals
      */
     private static function normalizeBraceRoute(
         string $route,
-        array $matchedParams,
-        bool $expandSquare = false,
-        $urlPath = null
+        array $matchedParams
     ) {
         $route = trim($route);
         if ($route === '' || $route === '/') {
@@ -313,14 +255,10 @@ private static function normalizeBraceRoute(
             $route = '/' . $route;
         }
 
-        if ($expandSquare) {
-            $route = self::expandSquareBracketOptionals($route, $matchedParams, $urlPath);
-        }
-
         // Strip inline constraints (e.g. Slim's {name:[^/]+} → {name}) before
         // splitting so that a '/' inside a constraint does not break the segment
         // split. The optional marker '?' is preserved: {name?:[0-9]+} → {name?}.
-        $route = preg_replace('/\{([a-zA-Z_][a-zA-Z0-9_]*(\?)?):([^}]*)\}/', '{$1}', $route);
+        $route = preg_replace('/\{([^}?:]+(\?)?):([^}]*)\}/', '{$1}', $route);
 
         $raw = ltrim($route, '/');
         $parts = explode('/', $raw);
@@ -346,6 +284,7 @@ private static function normalizeBraceRoute(
      * Normalize a single URL segment that may contain {param} placeholders.
      *
      * @return string|null The normalized element, or null if the segment is optional and absent
+     *                     with no remaining static text
      */
     private static function normalizeBraceSegment(string $segment, array $matchedParams)
     {
@@ -379,6 +318,13 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
         }
 
         if (empty($paramNames)) {
+            // All params were optional and absent.
+            // Preserve any static text remaining in the segment (e.g. "search.{_format?}" → "search").
+            $staticOnly = preg_replace('/\{[^}]+\}/', '', $segment);
+            $staticOnly = trim($staticOnly, '.-_~');
+            if ($staticOnly !== '') {
+                return self::encodeStaticSegment($staticOnly);
+            }
             return null;
         }
 
@@ -389,48 +335,6 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
         return '{' . implode('+', $paramNames) . '}';
     }
 
-    /**
-     * Expand Slim-style optional sections [...] based on matched params.
-     *
-     * For sections that contain no placeholder (e.g. [.json]), $urlPath is used
-     * to decide whether the literal text was part of the request; without it the
-     * section is always kept (backward-compatible behaviour).
-     */
-    private static function expandSquareBracketOptionals(string $route, array $matchedParams, $urlPath = null): string
-    {
-        $prev = null;
-        while ($prev !== $route) {
-            $prev = $route;
-            $route = preg_replace_callback(
-                '/\[([^\[\]]*)\]/',
-                function ($m) use ($matchedParams, $urlPath) {
-                    $inner = $m[1];
-                    preg_match_all('/\{([^}?:]+)[?:]?[^}]*\}/', $inner, $pm);
-                    $innerParams = $pm[1];
-
-                    if (empty($innerParams)) {
-                        // Static-only section (e.g. [.json]): include only when the
-                        // literal text actually appears in the request path.
-                        if ($urlPath !== null) {
-                            return strpos($urlPath, $inner) !== false ? $inner : '';
-                        }
-                        return $inner;
-                    }
-
-                    foreach ($innerParams as $param) {
-                        if (array_key_exists($param, $matchedParams)) {
-                            return $inner;
-                        }
-                    }
-
-                    return '';
-                },
-                $route
-            );
-        }
-        return $route;
-    }
-
     /**
      * Expand Laminas [...] optional sections based on matched params.
      *
@@ -438,6 +342,9 @@ function ($m) use ($matchedParams, $urlPath) {
      * section text with param values substituted is a substring of $urlPath.
      * This prevents middleware-injected params from incorrectly triggering
      * expansion of sections absent from the URL.
+     *
+     * For static-only optional sections (no params), the URL path is also checked
+     * to determine whether the literal text appeared in the request.
      */
     private static function expandBracketOptionals(
         string $template,
@@ -452,10 +359,19 @@ private static function expandBracketOptionals(
                 '/\[([^\[\]]*)\]/',
                 function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                     $inner = $m[1];
-                    $pattern = '/' . preg_quote($paramPrefix, '/') . '([a-zA-Z_][a-zA-Z0-9_]*)/';
+                    $pattern = '/' . preg_quote($paramPrefix, '/') . '([a-zA-Z_][a-zA-Z0-9_-]*)/';
                     preg_match_all($pattern, $inner, $pm);
                     $innerParams = $pm[1];
 
+                    if (empty($innerParams)) {
+                        // Static-only optional section (e.g. [/draft]):
+                        // only expand when the literal text appears in the URL.
+                        if ($urlPath !== null) {
+                            return (strpos($urlPath, $inner) !== false) ? $inner : '';
+                        }
+                        return $inner;
+                    }
+
                     // All params in the section must be present in matched params.
                     foreach ($innerParams as $param) {
                         if (!array_key_exists($param, $matchedParams)) {
@@ -463,21 +379,27 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                         }
                     }
 
-                    if ($urlPath !== null && !empty($innerParams)) {
+                    if ($urlPath !== null) {
                         // Substitute every param value before checking the URL so that
                         // multi-param sections like [/:year/:month] are found correctly.
                         $innerWithValues = $inner;
                         foreach ($innerParams as $param) {
                             $value = (string)$matchedParams[$param];
-                            $innerWithValues = preg_replace(
-                                '/' . preg_quote($paramPrefix . $param, '/') . '/',
-                                $value,
-                                $innerWithValues
-                            );
+                            $innerWithValues = str_replace($paramPrefix . $param, $value, $innerWithValues);
                         }
-                        if (strpos($urlPath, $innerWithValues) === false) {
-                            return '';
+                        if (strpos($urlPath, $innerWithValues) !== false) {
+                            return $inner;
+                        }
+                        // Try percent-encoded values (Laminas URL-decodes param values)
+                        $innerEncoded = $inner;
+                        foreach ($innerParams as $param) {
+                            $value = rawurlencode((string)$matchedParams[$param]);
+                            $innerEncoded = str_replace($paramPrefix . $param, $value, $innerEncoded);
+                        }
+                        if (strpos($urlPath, $innerEncoded) !== false) {
+                            return $inner;
                         }
+                        return '';
                     }
 
                     return $inner;
@@ -491,11 +413,12 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
     /**
      * Convert ":paramName" colon-prefix notation to "{paramName}" brace notation.
      * Laminas segment constraints like ":param{constraint}" are also handled.
+     * Hyphenated param names like ":user-id" are supported.
      */
     private static function colonParamsToBraces(string $template): string
     {
         return preg_replace_callback(
-            '/:([a-zA-Z_][a-zA-Z0-9_]*)(?:\{[^}]*\})?/',
+            '/:([a-zA-Z_][a-zA-Z0-9_-]*)(?:\{[^}]*\})?/',
             static function ($m) {
                 return '{' . $m[1] . '}';
             },
@@ -513,21 +436,19 @@ private static function percentParamsToBraces(string $template): string
     }
 
     /**
-     * Convert CakePHP route template syntax to brace notation.
+     * Find a param name of the form "paramN" that does not already appear in $template
+     * as either a colon-param (:paramN) or a brace-param ({paramN}).
      */
-    private static function cakephpToBraces(string $template): string
+    private static function uniqueParamName(string $template, string $paramPrefix = ':'): string
     {
-        $result = preg_replace('#/\*\*#', '/{catchall}', $template);
-        $result = preg_replace('#/\*(?!\*)#', '/{catchall}', $result);
-        $result = preg_replace('#(?<![\/\*])\*(?![\/\*])#', '{catchall}', $result);
-
-        return preg_replace_callback(
-            '/:([a-zA-Z_][a-zA-Z0-9_]*)/',
-            static function ($m) {
-                return '{' . $m[1] . '}';
-            },
-            $result
-        );
+        $i = 1;
+        while (
+            strpos($template, $paramPrefix . 'param' . $i) !== false ||
+            strpos($template, '{param' . $i . '}') !== false
+        ) {
+            $i++;
+        }
+        return 'param' . $i;
     }
 
     /**
@@ -581,4 +502,62 @@ public static function encodeParamName(string $name): string
         }
         return $result;
     }
+
+    /**
+     * Infer which Symfony route parameters were actually present in the URL path
+     * (vs. injected as route defaults).
+     *
+     * Handles three kinds of template segments:
+     *  - Whole-segment param:  {id}           → matched if URL has a segment at that position
+     *  - Mixed segment:        {id}.{_format} → matched if URL segment matches template regex
+     *  - Static segment:       users          → no params extracted
+     *
+     * UTF-8 parameter names are supported.
+     */
+    public static function inferSymfonyRouteParams(string $template, string $urlPath): array
+    {
+        $templateSegments = array_values(array_filter(explode('/', $template)));
+        $urlSegments      = array_values(array_filter(explode('/', $urlPath)));
+
+        $matched = [];
+        $urlIdx  = 0;
+
+        foreach ($templateSegments as $seg) {
+            if (preg_match('/^\{([^}?:]+)\}$/', $seg, $m)) {
+                // Whole-segment param — present if there is a URL segment at this position
+                if ($urlIdx < count($urlSegments)) {
+                    $matched[$m[1]] = $urlSegments[$urlIdx];
+                }
+                $urlIdx++;
+            } elseif (preg_match('/\{/', $seg)) {
+                // Mixed segment (static text + one or more params): determine presence by
+                // trying to match the URL segment against the template pattern.
+                if ($urlIdx < count($urlSegments)) {
+                    preg_match_all('/\{([^}?:]+)\}/', $seg, $pm);
+                    $paramNames = $pm[1];
+                    if (!empty($paramNames)) {
+                        // Build a lightweight regex from the template segment
+                        $staticParts = preg_split('/\{[^}]+\}/', $seg);
+                        $regexParts  = array_map(
+                            static function ($p) { return preg_quote($p, '/'); },
+                            $staticParts
+                        );
+                        $segRegex = '/^' . implode('(.+)', $regexParts) . '$/';
+                        if (@preg_match($segRegex, $urlSegments[$urlIdx])) {
+                            foreach ($paramNames as $p) {
+                                $matched[$p] = true;
+                            }
+                        }
+                        // else: URL segment doesn't contain the dynamic part → params absent
+                    }
+                }
+                $urlIdx++;
+            } else {
+                // Pure static segment — advance URL position
+                $urlIdx++;
+            }
+        }
+
+        return $matched;
+    }
 }
diff --git a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
index 775c165a09..721fe1c526 100644
--- a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
+++ b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
@@ -292,6 +292,19 @@
                     ],
                 ],
             ],
+            'user_by_id' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/user/:user-id',
+                    'constraints' => [
+                        'user-id' => '[0-9]+',
+                    ],
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
             'any_verb' => [
                 'type' => Literal::class,
                 'options' => [
diff --git a/tests/Frameworks/Laravel/Version_8_x/routes/web.php b/tests/Frameworks/Laravel/Version_8_x/routes/web.php
index 3a9ccc2ebf..f2266c991b 100644
--- a/tests/Frameworks/Laravel/Version_8_x/routes/web.php
+++ b/tests/Frameworks/Laravel/Version_8_x/routes/web.php
@@ -56,3 +56,11 @@
 
 // This route has to remain unnamed so we test both route cached and not cached.
 Route::get('/unnamed-route', [RouteCachingController::class, 'unnamed']);
+
+Route::get('/normalized-optional/{value?}', function ($value = null) {
+    return response($value ?? 'absent');
+});
+
+Route::get('/normalized-default/{format?}', function ($format = null) {
+    return response($format);
+})->defaults('format', 'html');
diff --git a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
index 38cbcaa27e..c6ac1300c3 100644
--- a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
+++ b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
@@ -37,4 +37,12 @@ public function utf8Action(Request $request, string $item)
             "Café: $item"
         );
     }
+
+    #[Route("/article/{slug}.{_format}", name: "article_mixed", requirements: ["_format" => "html|json|xml"])]
+    public function normalizedMixedAction(Request $request, string $slug, string $_format)
+    {
+        return new Response(
+            "$slug.$_format"
+        );
+    }
 }
diff --git a/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php b/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
index f7f15701e1..69e022c6fc 100644
--- a/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/CommonScenariosTest.php
@@ -115,7 +115,7 @@ public function provideSpecs()
                         'app.endpoint' => 'Error_::index',
                         Tag::SPAN_KIND => 'server',
                         Tag::COMPONENT => 'codeigniter',
-                        Tag::HTTP_ROUTE => 'error',
+                        Tag::HTTP_ROUTE => 'error'
                     ])
                     ->setError("Exception", "Uncaught Exception: datadog in %s:%d")
                     ->withExistingTagsNames(['error.stack'])
diff --git a/tests/Integrations/CodeIgniter/V2_2/ExitTest.php b/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
index 6b6a5a32d7..c7d0603228 100644
--- a/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
+++ b/tests/Integrations/CodeIgniter/V2_2/ExitTest.php
@@ -43,7 +43,7 @@ public function testScenario()
                     'app.endpoint' => 'Exits::index',
                     Tag::SPAN_KIND => 'server',
                     Tag::COMPONENT => 'codeigniter',
-                    Tag::HTTP_ROUTE => 'exits',
+                    Tag::HTTP_ROUTE => 'exits'
                 ])->withChildren([
                     SpanAssertion::build(
                         'Exits.index',
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 575dcc4d38..7d58774ce9 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -114,59 +114,6 @@ public function testLaravelRoot()
         $this->assertSame('/', RouteNormalizer::normalizeFromLaravel('/'));
     }
 
-    // normalizeFromSlim
-
-    public function testSlimSimpleRoute()
-    {
-        $this->assertSame('/users/{id}', RouteNormalizer::normalizeFromSlim('/users/{id}'));
-    }
-
-    public function testSlimRegexConstraintStripped()
-    {
-        $this->assertSame('/users/{id}', RouteNormalizer::normalizeFromSlim('/users/{id:[0-9]+}'));
-        $this->assertSame('/v2/{name}/blobs', RouteNormalizer::normalizeFromSlim('/v2/{name:[a-zA-Z0-9-]+}/blobs'));
-        // Constraint containing '/' must not break the segment split
-        $this->assertSame('/files/{name}', RouteNormalizer::normalizeFromSlim('/files/{name:[^/]+}'));
-    }
-
-    public function testSlimOptionalSegmentPresent()
-    {
-        $result = RouteNormalizer::normalizeFromSlim('/users/{id}[/{format}]', ['id' => '1', 'format' => 'json']);
-        $this->assertSame('/users/{id}/{format}', $result);
-    }
-
-    public function testSlimOptionalSegmentAbsent()
-    {
-        $result = RouteNormalizer::normalizeFromSlim('/users/{id}[/{format}]', ['id' => '1']);
-        $this->assertSame('/users/{id}', $result);
-    }
-
-    public function testSlimCatchAll()
-    {
-        $this->assertSame('/files/{file}', RouteNormalizer::normalizeFromSlim('/files/{file:.+}'));
-    }
-
-    public function testSlimStaticOptionalSectionPresent()
-    {
-        // /feed[.json] requested as /feed.json → .json section included
-        $result = RouteNormalizer::normalizeFromSlim('/feed[.json]', [], '/feed.json');
-        $this->assertSame('/feed.json', $result);
-    }
-
-    public function testSlimStaticOptionalSectionAbsent()
-    {
-        // /feed[.json] requested as /feed → .json section absent
-        $result = RouteNormalizer::normalizeFromSlim('/feed[.json]', [], '/feed');
-        $this->assertSame('/feed', $result);
-    }
-
-    public function testSlimStaticOptionalSectionNoUrlPath()
-    {
-        // Without URL path, backward-compatible: keep the section
-        $result = RouteNormalizer::normalizeFromSlim('/feed[.json]', []);
-        $this->assertSame('/feed.json', $result);
-    }
-
     // normalizeFromSymfony
 
     public function testSymfonySimpleRoute()
@@ -301,71 +248,6 @@ public function testLaminasWildcard()
         $this->assertSame('/{param1}', $result);
     }
 
-    // normalizeFromCakePHP
-
-    public function testCakePHPSimpleColon()
-    {
-        $this->assertSame('/articles/{id}', RouteNormalizer::normalizeFromCakePHP('/articles/:id'));
-    }
-
-    public function testCakePHPMixedSegment()
-    {
-        $result = RouteNormalizer::normalizeFromCakePHP('/articles/:id.:ext');
-        $this->assertSame('/articles/{id+ext}', $result);
-    }
-
-    public function testCakePHPCatchAll()
-    {
-        $this->assertSame('/{catchall}', RouteNormalizer::normalizeFromCakePHP('/*'));
-        $this->assertSame('/api/{catchall}', RouteNormalizer::normalizeFromCakePHP('/api/**'));
-    }
-
-    public function testCakePHPStaticRoute()
-    {
-        $this->assertSame('/admin/dashboard', RouteNormalizer::normalizeFromCakePHP('/admin/dashboard'));
-    }
-
-    // normalizeFromYii
-
-    public function testYiiSimpleColonPlaceholder()
-    {
-        $this->assertSame('/articles/{id}', RouteNormalizer::normalizeFromYii('/articles/:id'));
-    }
-
-    public function testYiiStaticRoute()
-    {
-        $this->assertSame('/site/index', RouteNormalizer::normalizeFromYii('/site/index'));
-    }
-
-    // normalizeFromCodeIgniter
-
-    public function testCodeIgniterLiteralRoute()
-    {
-        $this->assertSame('/articles/index', RouteNormalizer::normalizeFromCodeIgniter('articles/index'));
-    }
-
-    public function testCodeIgniterNumWildcard()
-    {
-        $this->assertSame('/blog/{param1}', RouteNormalizer::normalizeFromCodeIgniter('blog/(:num)'));
-    }
-
-    public function testCodeIgniterAnyWildcard()
-    {
-        $this->assertSame('/users/{param1}', RouteNormalizer::normalizeFromCodeIgniter('users/:any'));
-    }
-
-    public function testCodeIgniterMultipleWildcards()
-    {
-        $result = RouteNormalizer::normalizeFromCodeIgniter('posts/(:num)/comments/(:num)');
-        $this->assertSame('/posts/{param1}/comments/{param2}', $result);
-    }
-
-    public function testCodeIgniterCatchAll()
-    {
-        // A catch-all in CI is typically :any at the end
-        $this->assertSame('/{param1}', RouteNormalizer::normalizeFromCodeIgniter(':any'));
-    }
-
     // normalizeFromWordPress
 
     public function testWordPressSimpleRegex()

From ba10db0f42a9cfbc3d9fe765fcd2fccf80c4a4c0 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 13:24:51 +0200
Subject: [PATCH 33/54] Improve laminas integration

---
 .../Laminas/LaminasIntegration.php            | 24 +++++++++----------
 1 file changed, 11 insertions(+), 13 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 47eda39db3..0374ffad1f 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -279,23 +279,21 @@ static function (SpanData $span) use ($controller, $action) {
                     && $routeName !== null
                     && $routeName !== ''
                 ) {
-                    $cacheKey = (string) $routeName;
-                    $cachedRoute = \DDTrace\routing_cache_get($cacheKey);
-                    if ($cachedRoute !== false) {
-                        $httpRoute = $cachedRoute;
-                    } else {
-                        $httpRoute = LaminasIntegration::httpRouteTemplateFromNamedRouteStack($this, (string) $routeName);
-                        if ($httpRoute !== null && $httpRoute !== '') {
-                            \DDTrace\routing_cache_set($cacheKey, $httpRoute);
-                        }
-                    }
-                    if ($httpRoute !== null && $httpRoute !== false && $httpRoute !== '') {
+                    $httpRoute = LaminasIntegration::httpRouteTemplateFromNamedRouteStack($this, (string) $routeName);
+                    if ($httpRoute !== null && $httpRoute !== '') {
                         $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
                         if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
                             $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
                             $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
-                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
-                            if ($normalizedRoute !== null) {
+                            $cacheKey = $httpRoute . '|' . ($urlPath ?? '');
+                            $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+                            if ($normalizedRoute === false) {
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
+                                if ($normalizedRoute !== null) {
+                                    \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                                }
+                            }
+                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
                                 $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
                         }

From 0c0acecc5536cb1fb9b95c47da6ea9ad2bc1a798 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 13:27:46 +0200
Subject: [PATCH 34/54] Improve Symfony

---
 .../Symfony/SymfonyIntegration.php            | 41 +++++++++----------
 1 file changed, 19 insertions(+), 22 deletions(-)

diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index bfb7a213c9..b541465c56 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -442,34 +442,31 @@ static function() {
                     return;
                 }
 
-                $cacheKey = $route_name;
-                $cachedPath = \DDTrace\routing_cache_get($cacheKey);
-                if ($cachedPath !== false) {
-                    $path = $cachedPath;
-                } else {
-                    /** @var ContainerInterface $container */
-                    $container = self::$kernel->getContainer();
-                    $path = EndpointCatalog::pathForRoute($route_name, $container);
-
-                    // Try with locale suffix (Symfony i18n routing convention)
-                    if ($path === null) {
-                        $locale = $request->attributes->get('_locale');
-                        if ($locale !== null) {
-                            $path = EndpointCatalog::pathForRoute($route_name . '.' . $locale, $container);
-                        }
-                    }
-
-                    if ($path !== null) {
-                        \DDTrace\routing_cache_set($cacheKey, $path);
+                /** @var ContainerInterface $container */
+                $container = self::$kernel->getContainer();
+                $path = EndpointCatalog::pathForRoute($route_name, $container);
+
+                // Try with locale suffix (Symfony i18n routing convention)
+                if ($path === null) {
+                    $locale = $request->attributes->get('_locale');
+                    if ($locale !== null) {
+                        $path = EndpointCatalog::pathForRoute($route_name . '.' . $locale, $container);
                     }
                 }
 
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                        $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
-                        $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path, $matchedParams);
-                        if ($normalizedRoute !== null) {
+                        $cacheKey = $route_name;
+                        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+                        if ($normalizedRoute === false) {
+                            $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
+                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path, $matchedParams);
+                            if ($normalizedRoute !== null) {
+                                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                            }
+                        }
+                        if ($normalizedRoute !== null && $normalizedRoute !== false) {
                             $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                         }
                     }

From f34373d98db61782198362eb8a2a161183ef0f44 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 15:17:05 +0200
Subject: [PATCH 35/54] Fix pipeline

---
 .../appsec/php/integration/Symfony62Tests.groovy |  3 ++-
 src/DDTrace/Util/RouteNormalizer.php             | 16 +++++++++++-----
 .../Unit/Util/Normalizer/RouteNormalizerTest.php | 10 ++--------
 3 files changed, 15 insertions(+), 14 deletions(-)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
index 51515f2f97..eafeaa2dd2 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
@@ -213,7 +213,7 @@ class Symfony62Tests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 15
+        assert endpoints.size() == 16
         assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null
         assert endpoints.find { it.path == '/dynamic-path/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /dynamic-path/{param01}' } != null
         assert endpoints.find { it.path == '/caminho-dinamico/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /caminho-dinamico/{param01}' } != null
@@ -229,6 +229,7 @@ class Symfony62Tests {
         assert endpoints.find { it.path == '/lucky/fail' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /lucky/fail' } != null
         assert endpoints.find { it.path == '/_error/{code}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /_error/{code}.{_format}' } != null
         assert endpoints.find { it.path == '/article/{slug}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /article/{slug}.{_format}' } != null
+        assert endpoints.find { it.path == '/café/{item}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /café/{item}' } != null
     }
 
     @Test
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index eb790f6218..11f250a66c 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -113,6 +113,11 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
             return '/';
         }
 
+        // Pull the path separator out of (?:/...) non-capturing groups so that
+        // splitRegexBySlash treats the embedded '/' as a real segment boundary.
+        // Pattern: (?:/foo) means "optional /foo segment" — the '/' belongs at top level.
+        $rule = str_replace('(?:/', '/(?:', $rule);
+
         $segments = self::splitRegexBySlash($rule);
         $normalizedSegments = [];
         $paramIndex = 1;
@@ -123,18 +128,19 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
             }
 
             if (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
-                // Extract static prefix before the first regex metacharacter
                 $prefixLen = strcspn($segment, '([{?*+|^$\\');
-                if ($prefixLen > 0) {
+                $dynamicPart = substr($segment, $prefixLen);
+                $groupCount = self::countCaptureGroups($dynamicPart);
+
+                // Only emit a static prefix when there is at most one capture group;
+                // mixed segments with multiple groups are treated as fully dynamic.
+                if ($prefixLen > 0 && $groupCount <= 1) {
                     $staticPart = rtrim(substr($segment, 0, $prefixLen), '/-._');
                     if ($staticPart !== '') {
                         $normalizedSegments[] = self::encodeStaticSegment($staticPart);
                     }
                 }
 
-                $dynamicPart = substr($segment, $prefixLen);
-                $groupCount = self::countCaptureGroups($dynamicPart);
-
                 if ($groupCount === 0) {
                     if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
                         continue;
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 7d58774ce9..2ea70d94f1 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -330,17 +330,11 @@ public function testRfcExampleFlaskMixedStaticDynamic()
     public function testRfcExampleRailsMandatoryFormat()
     {
         // http.route: /photos/:id.:format → /photos/{id+format}
-        $result = RouteNormalizer::normalizeFromCakePHP('/photos/:id.:format');
+        // Laminas uses the same :param syntax as CakePHP/Rails for this pattern.
+        $result = RouteNormalizer::normalizeFromLaminas('/photos/:id.:format');
         $this->assertSame('/photos/{id+format}', $result);
     }
 
-    public function testRfcExampleGoGorilla()
-    {
-        // http.route: /v2/{name:[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]}/blobs
-        $result = RouteNormalizer::normalizeFromSlim('/v2/{name:[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]}/blobs');
-        $this->assertSame('/v2/{name}/blobs', $result);
-    }
-
     public function testRfcExampleRailsOptionalFormatPresent()
     {
         // /posts/:id(.:format) with format present → /posts/{id+format}

From 34884f0dbe3c05d4929b1f8e7b7f0bcb875fab01 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 16:18:17 +0200
Subject: [PATCH 36/54] Add more tests

---
 .../php/integration/Symfony62Tests.groovy     | 25 ++++++++++-
 .../Laminas/LaminasIntegration.php            |  7 ++-
 .../Symfony/SymfonyIntegration.php            |  8 +++-
 .../src/Controller/HomeController.php         |  6 +++
 .../Util/Normalizer/RouteNormalizerTest.php   | 43 +++++++++++++++++++
 5 files changed, 85 insertions(+), 4 deletions(-)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
index eafeaa2dd2..810b2e72f4 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
@@ -213,7 +213,7 @@ class Symfony62Tests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 16
+        assert endpoints.size() == 17
         assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null
         assert endpoints.find { it.path == '/dynamic-path/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /dynamic-path/{param01}' } != null
         assert endpoints.find { it.path == '/caminho-dinamico/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /caminho-dinamico/{param01}' } != null
@@ -230,10 +230,33 @@ class Symfony62Tests {
         assert endpoints.find { it.path == '/_error/{code}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /_error/{code}.{_format}' } != null
         assert endpoints.find { it.path == '/article/{slug}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /article/{slug}.{_format}' } != null
         assert endpoints.find { it.path == '/café/{item}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /café/{item}' } != null
+        assert endpoints.find { it.path == '/posts/{page}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /posts/{page}' } != null
     }
 
     @Test
     @Order(11)
+    void 'optional param absent: cache key does not bleed into present case'() {
+        // Hit /posts (page absent from URL — uses default=1) first so that if the cache key
+        // were just the route name, the result '/posts' would be stored and served for /posts/2.
+        HttpRequest absentReq = container.buildReq('/posts').GET().build()
+        Trace absentTrace = container.traceFromRequest(absentReq, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+        }
+        assert absentTrace.first().meta.'http.route' == '/posts/{page}'
+        assert absentTrace.first().meta.'_dd.appsec.normalized_route' == '/posts'
+
+        // Now hit /posts/2 (page present in URL). With a coarse cache key (route name only)
+        // this would incorrectly return '/posts' from cache instead of '/posts/{page}'.
+        HttpRequest presentReq = container.buildReq('/posts/2').GET().build()
+        Trace presentTrace = container.traceFromRequest(presentReq, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+        }
+        assert presentTrace.first().meta.'http.route' == '/posts/{page}'
+        assert presentTrace.first().meta.'_dd.appsec.normalized_route' == '/posts/{page}'
+    }
+
+    @Test
+    @Order(12)
     void 'mixed segment route normalizes both params into one brace group'() {
         HttpRequest req = container.buildReq('/article/my-post.html').GET().build()
         Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 0374ffad1f..33ff191110 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -285,7 +285,12 @@ static function (SpanData $span) use ($controller, $action) {
                         if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
                             $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
                             $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
-                            $cacheKey = $httpRoute . '|' . ($urlPath ?? '');
+                            // Only include the URL in the key when the template has optional
+                            // bracket sections; for fully-required routes the normalized form
+                            // is the same for every request regardless of param values.
+                            $cacheKey = strpos($httpRoute, '[') !== false
+                                ? $httpRoute . '|' . ($urlPath ?? '')
+                                : $httpRoute;
                             $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                             if ($normalizedRoute === false) {
                                 $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index b541465c56..6929b1213f 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -457,10 +457,14 @@ static function() {
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
-                        $cacheKey = $route_name;
+                        // inferSymfonyRouteParams is lightweight (URL parsing only); compute it
+                        // first so the cache key encodes which optional params are present.
+                        // Without this, a route with optional params caches only the first
+                        // materialization and serves it for all subsequent URL patterns.
+                        $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
+                        $cacheKey = $route_name . '|' . implode(',', array_keys($matchedParams));
                         $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                         if ($normalizedRoute === false) {
-                            $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
                             $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromSymfony($path, $matchedParams);
                             if ($normalizedRoute !== null) {
                                 \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
diff --git a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
index c6ac1300c3..9d644693df 100644
--- a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
+++ b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
@@ -45,4 +45,10 @@ public function normalizedMixedAction(Request $request, string $slug, string $_f
             "$slug.$_format"
         );
     }
+
+    #[Route("/posts/{page}", name: "posts_optional_page", defaults: ["page" => 1])]
+    public function postsAction(Request $request, int $page)
+    {
+        return new Response("posts page: $page");
+    }
 }
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 2ea70d94f1..4a8897ee87 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -168,6 +168,49 @@ public function testSymfonyNoMatchedParamsArgKeepsAll()
         $this->assertSame('/blog/{page}', $result);
     }
 
+    // inferSymfonyRouteParams — used to build the cache key in SymfonyIntegration
+
+    public function testInferSymfonyRouteParamsRequiredParamsAlwaysPresent()
+    {
+        $params = RouteNormalizer::inferSymfonyRouteParams('/users/{id}', '/users/42');
+        $this->assertArrayHasKey('id', $params);
+    }
+
+    public function testInferSymfonyRouteParamsOptionalParamAbsent()
+    {
+        // Route /posts/{page} where page has a Symfony default — URL /posts does not include page.
+        // The integration code uses array_keys($params) as cache key suffix; this must be []
+        // so that the 'absent' cache entry is distinct from the 'present' one.
+        $params = RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts');
+        $this->assertSame([], $params);
+    }
+
+    public function testInferSymfonyRouteParamsOptionalParamPresent()
+    {
+        // URL /posts/2 provides page explicitly — must be in the returned params.
+        $params = RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts/2');
+        $this->assertArrayHasKey('page', $params);
+    }
+
+    public function testInferSymfonyRouteParamsCacheKeysDiffer()
+    {
+        // Core invariant for correct cache behaviour: the two URL patterns for the same route
+        // produce different param key sets, so the cache key suffix encodes presence/absence.
+        $absent  = array_keys(RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts'));
+        $present = array_keys(RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts/2'));
+        $this->assertNotSame($absent, $present);
+
+        // And normalizeFromSymfony produces the correct result for each case.
+        $this->assertSame('/posts', RouteNormalizer::normalizeFromSymfony(
+            '/posts/{page}',
+            RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts')
+        ));
+        $this->assertSame('/posts/{page}', RouteNormalizer::normalizeFromSymfony(
+            '/posts/{page}',
+            RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts/2')
+        ));
+    }
+
     // normalizeFromLaminas
 
     public function testLaminasSimpleColon()

From 4e7276f6f0a5e27e1d0ab11b5e05b4f350933530 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 2 Oct 2026 16:01:55 +0200
Subject: [PATCH 37/54] Add more tests

---
 .../php/integration/Laminas33Tests.groovy     | 104 +++++++++++++++++-
 .../php/integration/Symfony62Tests.groovy     | 101 ++++++++++++++++-
 .../php/integration/WordPressTests.groovy     |  47 +++++++-
 .../Application/config/module.config.php      |  90 ++++++++++++---
 .../src/Controller/HomeController.php         |  32 ++++++
 .../mu-plugins/normalized-route-test.php      |  42 +++++++
 6 files changed, 396 insertions(+), 20 deletions(-)
 create mode 100644 tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
index 1aef791790..b2c0d959b2 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
@@ -140,7 +140,32 @@ class Laminas33Tests {
             it.path == '/any-verb' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /any-verb'
         } != null
         assert endpoints.find {
-            it.path == '/user/:user-id' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /user/:user-id'
+            it.path == '/normalized-regex/%id%.%format%' && it.method == '*' &&
+                    it.operationName == 'http.request' && it.resourceName == '* /normalized-regex/%id%.%format%'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-encoded[/:slug]' && it.method == '*' &&
+                    it.operationName == 'http.request' && it.resourceName == '* /normalized-encoded[/:slug]'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-static[/draft]' && it.method == '*' &&
+                    it.operationName == 'http.request' && it.resourceName == '* /normalized-static[/draft]'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-name/:user-id' && it.method == '*' &&
+                    it.operationName == 'http.request' && it.resourceName == '* /normalized-name/:user-id'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-wildcard/:param1' && it.method == '*' &&
+                    it.operationName == 'http.request' && it.resourceName == '* /normalized-wildcard/:param1'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-wildcard/:param1/*' && it.method == '*' &&
+                    it.operationName == 'http.request' && it.resourceName == '* /normalized-wildcard/:param1/*'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized/{translated_page}' && it.method == '*' &&
+                    it.operationName == 'http.request' && it.resourceName == '* /normalized/{translated_page}'
         } != null
     }
 
@@ -348,13 +373,82 @@ class Laminas33Tests {
 
     @Test
     @Order(13)
-    void 'hyphenated param name in segment route normalizes correctly'() {
+    void 'optional regex capture absent is omitted from normalized route'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized-regex/article').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert trace.first().meta.'http.route' == '/normalized-regex/%id%.%format%'
+        assert trace.first().meta.'_dd.appsec.normalized_route' == '/normalized-regex/{id}'
+    }
+
+    @Test
+    @Order(14)
+    void 'encoded optional value is recognized as present'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized-encoded/a%20b').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert trace.first().meta.'http.route' == '/normalized-encoded[/:slug]'
+        assert trace.first().meta.'_dd.appsec.normalized_route' == '/normalized-encoded/{slug}'
+    }
+
+    @Test
+    @Order(15)
+    void 'static-only optional segment absent is omitted'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized-static').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert trace.first().meta.'http.route' == '/normalized-static[/draft]'
+        assert trace.first().meta.'_dd.appsec.normalized_route' == '/normalized-static'
+    }
+
+    @Test
+    @Order(16)
+    void 'hyphenated segment parameter name remains intact'() {
         Trace trace = container.traceFromRequest(
-                container.buildReq('/user/42').GET().build(),
+                container.buildReq('/normalized-name/alice').GET().build(),
                 ofString()) { HttpResponse<String> resp ->
             assert resp.statusCode() == 200
         }
-        assert trace.first().meta.'http.route' == '/user/:user-id'
-        assert trace.first().meta.'_dd.appsec.normalized_route' == '/user/{user-id}'
+
+        assert trace.first().meta.'http.route' == '/normalized-name/:user-id'
+        assert trace.first().meta.'_dd.appsec.normalized_route' == '/normalized-name/{user-id}'
     }
+
+    @Test
+    @Order(17)
+    void 'wildcard placeholder does not collide with an existing parameter name'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized-wildcard/value/foo/bar').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert trace.first().meta.'http.route' == '/normalized-wildcard/:param1/*'
+        assert trace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized-wildcard/{param1}/{param2}'
+    }
+
+    @Test
+    @Order(18)
+    void 'translated literal remains a static route element'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized/translated-page').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert trace.first().meta.'http.route' == '/normalized/{translated_page}'
+        assert trace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized/translated-page'
+    }
+
 }
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
index 810b2e72f4..9e262df577 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
@@ -166,6 +166,7 @@ class Symfony62Tests {
 
             Span span = trace.first()
             assert span.meta."http.route" == null
+            assert span.meta."_dd.appsec.normalized_route" == null
             assert span.meta."symfony.route.name" != null
             assert span.resource == 'app_home_dynamic'
         } finally {
@@ -231,10 +232,108 @@ class Symfony62Tests {
         assert endpoints.find { it.path == '/article/{slug}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /article/{slug}.{_format}' } != null
         assert endpoints.find { it.path == '/café/{item}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /café/{item}' } != null
         assert endpoints.find { it.path == '/posts/{page}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /posts/{page}' } != null
+        assert endpoints.find {
+            it.path == '/normalized/mixed/{id}.{_format}' && it.method == 'GET' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == 'GET /normalized/mixed/{id}.{_format}'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized/zero/{id}' && it.method == 'GET' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == 'GET /normalized/zero/{id}'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized/search.{_format}' && it.method == 'GET' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == 'GET /normalized/search.{_format}'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized/utf8/{föo}' && it.method == 'GET' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == 'GET /normalized/utf8/{föo}'
+        } != null
     }
 
     @Test
     @Order(11)
+    void 'normalized route is absent when API Security is disabled'() {
+        try {
+            def res = CONTAINER.execInContainer(
+                    'bash', '-c',
+                    '''echo export DD_API_SECURITY_ENABLED=false >> /etc/apache2/envvars;
+                       service apache2 restart''')
+            assert res.exitCode == 0
+
+            Trace trace = container.traceFromRequest('/') { HttpResponse<InputStream> resp ->
+                assert resp.statusCode() == 200
+            }
+
+            Span span = trace.first()
+            assert span.meta.'http.route' == '/'
+            assert span.meta.'_dd.appsec.normalized_route' == null
+        } finally {
+            def res = CONTAINER.execInContainer(
+                    'bash', '-c',
+                    '''sed -i '/export DD_API_SECURITY_ENABLED=/d' /etc/apache2/envvars;
+                       service apache2 restart''')
+            assert res.exitCode == 0
+        }
+    }
+
+    @Test
+    @Order(12)
+    void 'mixed dynamic values in one segment are combined'() {
+        Trace trace = container.traceFromRequest('/normalized/mixed/article.json') {
+            HttpResponse<InputStream> resp ->
+                assert resp.statusCode() == 200
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == '/normalized/mixed/{id}.{_format}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized/mixed/{id+_format}'
+    }
+
+    @Test
+    @Order(13)
+    void 'zero-valued path parameter is retained'() {
+        Trace trace = container.traceFromRequest('/normalized/zero/0') {
+            HttpResponse<InputStream> resp ->
+                assert resp.statusCode() == 200
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == '/normalized/zero/{id}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized/zero/{id}'
+    }
+
+    @Test
+    @Order(14)
+    void 'static part of a segment remains when its optional parameter is absent'() {
+        Trace trace = container.traceFromRequest('/normalized/search') {
+            HttpResponse<InputStream> resp ->
+                assert resp.statusCode() == 200
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == '/normalized/search.{_format}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized/search'
+    }
+
+    @Test
+    @Order(15)
+    void 'UTF-8 optional parameter name is omitted when absent'() {
+        Trace trace = container.traceFromRequest('/normalized/utf8') {
+            HttpResponse<InputStream> resp ->
+                assert resp.statusCode() == 200
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == '/normalized/utf8/{föo}'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized/utf8'
+    }
+
+    @Test
+    @Order(16)
     void 'optional param absent: cache key does not bleed into present case'() {
         // Hit /posts (page absent from URL — uses default=1) first so that if the cache key
         // were just the route name, the result '/posts' would be stored and served for /posts/2.
@@ -256,7 +355,7 @@ class Symfony62Tests {
     }
 
     @Test
-    @Order(12)
+    @Order(17)
     void 'mixed segment route normalizes both params into one brace group'() {
         HttpRequest req = container.buildReq('/article/my-post.html').GET().build()
         Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy
index e53151fda4..fce971816f 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy
@@ -3,6 +3,7 @@ package com.datadog.appsec.php.integration
 import com.datadog.appsec.php.docker.AppSecContainer
 import com.datadog.appsec.php.docker.FailOnUnmatchedTraces
 import com.datadog.appsec.php.docker.InspectContainerHelper
+import com.datadog.appsec.php.docker.PhpFpm
 import com.datadog.appsec.php.model.Span
 import com.datadog.appsec.php.model.Trace
 import groovy.util.logging.Slf4j
@@ -96,9 +97,15 @@ class WordPressTests {
         res = CONTAINER.execInContainer('bash', '-c',
                 """export DD_TRACE_CLI_ENABLED=false DD_APPSEC_ENABLED=0
                    wp option update siteurl 'http://localhost:${port}' --path=/var/www/public --allow-root
-                   wp option update home 'http://localhost:${port}' --path=/var/www/public --allow-root""")
+                   wp option update home 'http://localhost:${port}' --path=/var/www/public --allow-root
+                   wp rewrite structure '/%postname%/' --path=/var/www/public --allow-root
+                   wp rewrite flush --hard --path=/var/www/public --allow-root""")
         assert res.exitCode == 0 : "Failed to update WordPress URLs: ${res.stderr}"
 
+        PhpFpm fpm = new PhpFpm(CONTAINER)
+        fpm.setPoolValue('pm.max_children', '1')
+        fpm.reload()
+
         CONTAINER.clearTraces()
     }
 
@@ -194,4 +201,42 @@ class WordPressTests {
         assert span.meta."_dd.appsec.usr.id" == "1"
         assert span.meta."_dd.appsec.user.collection_mode" == "identification"
     }
+
+    @Test
+    @Order(6)
+    void 'static prefix remains when optional rewrite capture is absent'() {
+        Trace trace = CONTAINER.traceFromRequest('/normalized-cache/') {
+            HttpResponse<InputStream> response ->
+                assert response.statusCode() == 200
+        }
+        Span span = trace.first()
+        assert span.meta.'http.route' ==
+                '^normalized-cache(?:/([^/]+))?/?$'
+        assert span.meta.'_dd.appsec.normalized_route' == '/normalized-cache'
+    }
+
+    @Test
+    @Order(7)
+    void 'optional rewrite capture is normalized for each request'() {
+        Trace absentTrace = CONTAINER.traceFromRequest('/normalized-cache-shape/') {
+            HttpResponse<InputStream> response ->
+                assert response.statusCode() == 200
+        }
+        Span absentSpan = absentTrace.first()
+        assert absentSpan.meta.'http.route' ==
+                '^normalized-cache-shape/?([^/]*)/?$'
+        assert absentSpan.meta.'_dd.appsec.normalized_route' ==
+                '/normalized-cache-shape'
+
+        Trace presentTrace = CONTAINER.traceFromRequest(
+                '/normalized-cache-shape/present/') {
+            HttpResponse<InputStream> response ->
+                assert response.statusCode() == 200
+        }
+        Span presentSpan = presentTrace.first()
+        assert presentSpan.meta.'http.route' ==
+                '^normalized-cache-shape/?([^/]*)/?$'
+        assert presentSpan.meta.'_dd.appsec.normalized_route' ==
+                '/normalized-cache-shape/{param1}'
+    }
 }
diff --git a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
index 721fe1c526..02b95fa1a5 100644
--- a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
+++ b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
@@ -254,6 +254,83 @@
                     ],
                 ],
             ],
+            'regex_optional_format' => [
+                'type' => Regex::class,
+                'options' => [
+                    'regex' => '/normalized-regex/(?P<id>[a-z]+)(?:\.(?P<format>[a-z]+))?',
+                    'spec' => '/normalized-regex/%id%.%format%',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                        'format' => 'html',
+                    ],
+                ],
+            ],
+            'normalized_encoded_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-encoded[/:slug]',
+                    'constraints' => [
+                        'slug' => '.+',
+                    ],
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_static_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-static[/draft]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_hyphenated_name' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-name/:user-id',
+                    'constraints' => [
+                        'user-id' => '[a-z]+',
+                    ],
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_wildcard_collision' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-wildcard/:param1',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+                'may_terminate' => false,
+                'child_routes' => [
+                    'tail' => [
+                        'type' => Wildcard::class,
+                        'options' => [
+                            'defaults' => [],
+                        ],
+                    ],
+                ],
+            ],
+            'normalized_translated_literal' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized/{translated_page}',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
             'scheme_http_gate' => [
                 'type' => Scheme::class,
                 'options' => [
@@ -292,19 +369,6 @@
                     ],
                 ],
             ],
-            'user_by_id' => [
-                'type' => Segment::class,
-                'options' => [
-                    'route' => '/user/:user-id',
-                    'constraints' => [
-                        'user-id' => '[0-9]+',
-                    ],
-                    'defaults' => [
-                        'controller' => DynamicPathController::class,
-                        'action' => 'index',
-                    ],
-                ],
-            ],
             'any_verb' => [
                 'type' => Literal::class,
                 'options' => [
diff --git a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
index 9d644693df..94d8189ea4 100644
--- a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
+++ b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
@@ -51,4 +51,36 @@ public function postsAction(Request $request, int $page)
     {
         return new Response("posts page: $page");
     }
+
+    #[Route("/normalized/mixed/{id}.{_format}", name: "normalized_mixed")]
+    public function normalizedMixedIdAction(Request $request)
+    {
+        return new Response('Mixed route');
+    }
+
+    #[Route("/normalized/zero/{id}", name: "normalized_zero")]
+    public function normalizedZeroAction(Request $request)
+    {
+        return new Response('Zero route');
+    }
+
+    #[Route(
+        "/normalized/search.{_format}",
+        name: "normalized_static_optional",
+        defaults: ["_format" => null]
+    )]
+    public function normalizedStaticOptionalAction(Request $request)
+    {
+        return new Response('Optional format route');
+    }
+
+    #[Route(
+        "/normalized/utf8/{föo}",
+        name: "normalized_utf8_optional",
+        defaults: ["föo" => null]
+    )]
+    public function normalizedUtf8OptionalAction(Request $request)
+    {
+        return new Response('UTF-8 parameter route');
+    }
 }
diff --git a/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php b/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php
new file mode 100644
index 0000000000..f315c9e0ff
--- /dev/null
+++ b/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php
@@ -0,0 +1,42 @@
+<?php
+
+/*
+ * Plugin Name: Normalized route integration fixture
+ */
+
+add_action('init', static function () {
+    add_rewrite_rule(
+        '^normalized-cache(?:/([^/]+))?/?$',
+        'index.php?normalized_route_test=1&normalized_value=$matches[1]',
+        'top'
+    );
+    add_rewrite_rule(
+        '^normalized-cache-shape/?([^/]*)/?$',
+        'index.php?normalized_route_test=1&normalized_value=$matches[1]',
+        'top'
+    );
+});
+
+add_filter('query_vars', static function (array $queryVars): array {
+    $queryVars[] = 'normalized_route_test';
+    $queryVars[] = 'normalized_value';
+    return $queryVars;
+});
+
+add_filter('pre_handle_404', static function ($preempt, $query) {
+    if ($query->get('normalized_route_test')) {
+        return true;
+    }
+    return $preempt;
+}, 10, 2);
+
+add_action('template_redirect', static function () {
+    if (! get_query_var('normalized_route_test')) {
+        return;
+    }
+
+    status_header(200);
+    header('Content-Type: text/plain');
+    echo get_query_var('normalized_value') ?: 'absent';
+    exit;
+});

From 122bf571457d581521d46cee520ad0ac964532f2 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Thu, 27 Aug 2026 18:12:03 +0200
Subject: [PATCH 38/54] Fix pipeline

---
 .../php/integration/Laminas33Tests.groovy     |  20 +-
 .../Application/config/module.config.php      | 362 ++++++++++++++++++
 .../Symfony/SymfonyIntegration.php            |   4 +-
 .../WordPress/WordPressIntegrationLoader.php  |   5 +-
 src/DDTrace/Util/RouteNormalizer.php          |   4 +-
 5 files changed, 371 insertions(+), 24 deletions(-)
 create mode 100644 appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
index b2c0d959b2..b9f2de1008 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
@@ -81,7 +81,7 @@ class Laminas33Tests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 33
+        assert endpoints.size() == 32
         assert endpoints.find { it.path == '/' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /' } != null
         assert endpoints.find {
             it.path == '/application[/:action]' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /application[/:action]'
@@ -163,10 +163,6 @@ class Laminas33Tests {
             it.path == '/normalized-wildcard/:param1/*' && it.method == '*' &&
                     it.operationName == 'http.request' && it.resourceName == '* /normalized-wildcard/:param1/*'
         } != null
-        assert endpoints.find {
-            it.path == '/normalized/{translated_page}' && it.method == '*' &&
-                    it.operationName == 'http.request' && it.resourceName == '* /normalized/{translated_page}'
-        } != null
     }
 
     @Test
@@ -437,18 +433,4 @@ class Laminas33Tests {
                 '/normalized-wildcard/{param1}/{param2}'
     }
 
-    @Test
-    @Order(18)
-    void 'translated literal remains a static route element'() {
-        Trace trace = container.traceFromRequest(
-                container.buildReq('/normalized/translated-page').GET().build(),
-                ofString()) { HttpResponse<String> resp ->
-            assert resp.statusCode() == 200
-        }
-
-        assert trace.first().meta.'http.route' == '/normalized/{translated_page}'
-        assert trace.first().meta.'_dd.appsec.normalized_route' ==
-                '/normalized/translated-page'
-    }
-
 }
diff --git a/appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php b/appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php
new file mode 100644
index 0000000000..d6aca885d3
--- /dev/null
+++ b/appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php
@@ -0,0 +1,362 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Application;
+
+use Application\Controller\DynamicPathController;
+use Application\Controller\LoginControllerFactory;
+use Laminas\Router\Http\Hostname;
+use Laminas\Router\Http\Literal;
+use Laminas\Router\Http\Method;
+use Laminas\Router\Http\Placeholder;
+use Laminas\Router\Http\Regex;
+use Laminas\Router\Http\Scheme;
+use Laminas\Router\Http\Segment;
+use Laminas\Router\Http\Wildcard;
+use Laminas\ServiceManager\Factory\InvokableFactory;
+
+return [
+    'router' => [
+        'routes' => [
+            'home' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/',
+                    'defaults' => [
+                        'controller' => Controller\IndexController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'application' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/application[/:action]',
+                    'constraints' => [
+                        'action' => '[a-zA-Z][a-zA-Z0-9_-]*',
+                    ],
+                    'defaults' => [
+                        'controller' => Controller\IndexController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'authenticate' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/authenticate',
+                    'defaults' => [
+                        'controller' => Controller\LoginController::class,
+                        'action' => 'auth',
+                    ],
+                ],
+            ],
+            'behind_auth' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/behind-auth',
+                    'defaults' => [
+                        'controller' => Controller\LoginController::class,
+                        'action' => 'behindAuth',
+                    ],
+                ],
+            ],
+            'dynamic_path' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/dynamic-path[/:param01]',
+                    'constraints' => [
+                        'param01' => '[a-zA-Z0-9_-]+',
+                    ],
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'nested_resource' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/resource',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+                'may_terminate' => true,
+                'child_routes' => [
+                    'item' => [
+                        'type' => Segment::class,
+                        'options' => [
+                            'route' => '/:resourceId',
+                            'defaults' => [
+                                'controller' => DynamicPathController::class,
+                                'action' => 'index',
+                            ],
+                        ],
+                        'may_terminate' => true,
+                        'child_routes' => [
+                            'sub' => [
+                                'type' => Segment::class,
+                                'options' => [
+                                    'route' => '/:subId',
+                                    'defaults' => [
+                                        'controller' => DynamicPathController::class,
+                                        'action' => 'index',
+                                    ],
+                                ],
+                            ],
+                        ],
+                    ],
+                ],
+            ],
+            'verb_test' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/verb-test',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+                'may_terminate' => false,
+                'child_routes' => [
+                    'get'    => ['type' => Method::class, 'options' => ['verb' => 'GET']],
+                    'post'   => ['type' => Method::class, 'options' => ['verb' => 'POST']],
+                    'put'    => ['type' => Method::class, 'options' => ['verb' => 'PUT']],
+                    'patch'  => ['type' => Method::class, 'options' => ['verb' => 'PATCH']],
+                    'delete' => ['type' => Method::class, 'options' => ['verb' => 'DELETE']],
+                ],
+            ],
+            'multi_verb' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/multi-verb',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+                'may_terminate' => false,
+                'child_routes' => [
+                    'read' => [
+                        'type' => Method::class,
+                        'options' => ['verb' => 'GET,HEAD,OPTIONS'],
+                    ],
+                    'write' => [
+                        'type' => Method::class,
+                        'options' => ['verb' => 'POST,PUT'],
+                    ],
+                ],
+            ],
+            'chained_resource' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/chain',
+                ],
+                'chain_routes' => [
+                    [
+                        'type' => Segment::class,
+                        'options' => [
+                            'route' => '/:chainId',
+                            'defaults' => [
+                                'controller' => DynamicPathController::class,
+                                'action' => 'index',
+                            ],
+                        ],
+                    ],
+                ],
+            ],
+            'regex_year' => [
+                'type' => Regex::class,
+                'options' => [
+                    'regex' => '/regex-year/(?P<year>\d{4})',
+                    'spec' => '/regex-year/%year%',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                        'year' => '2000',
+                    ],
+                ],
+            ],
+            'regex_optional_format' => [
+                'type' => Regex::class,
+                'options' => [
+                    'regex' => '/normalized-regex/(?P<id>[a-z]+)(?:\.(?P<format>[a-z]+))?',
+                    'spec' => '/normalized-regex/%id%.%format%',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                        'format' => 'html',
+                    ],
+                ],
+            ],
+            'normalized_encoded_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-encoded[/:slug]',
+                    'constraints' => [
+                        'slug' => '.+',
+                    ],
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_static_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-static[/draft]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_hyphenated_name' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-name/:user-id',
+                    'constraints' => [
+                        'user-id' => '[a-z]+',
+                    ],
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_wildcard_collision' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-wildcard/:param1',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+                'may_terminate' => false,
+                'child_routes' => [
+                    'tail' => [
+                        'type' => Wildcard::class,
+                        'options' => [
+                            'defaults' => [],
+                        ],
+                    ],
+                ],
+            ],
+            'scheme_http_gate' => [
+                'type' => Scheme::class,
+                'options' => [
+                    'scheme' => 'http',
+                    'defaults' => [],
+                ],
+                'may_terminate' => false,
+                'child_routes' => [
+                    'page' => [
+                        'type' => Literal::class,
+                        'options' => [
+                            'route' => '/scheme-only-page',
+                            'defaults' => [
+                                'controller' => DynamicPathController::class,
+                                'action' => 'index',
+                            ],
+                        ],
+                    ],
+                ],
+            ],
+            'placeholder_branch' => [
+                'type' => Placeholder::class,
+                'options' => [
+                    'defaults' => [],
+                ],
+                'child_routes' => [
+                    'under' => [
+                        'type' => Literal::class,
+                        'options' => [
+                            'route' => '/placeholder-literal',
+                            'defaults' => [
+                                'controller' => DynamicPathController::class,
+                                'action' => 'index',
+                            ],
+                        ],
+                    ],
+                ],
+            ],
+            'any_verb' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/any-verb',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+
+            'wildcard_keys' => [
+                'type' => Literal::class,
+                'options' => [
+                    'route' => '/wildcard-keys',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+                'may_terminate' => false,
+                'child_routes' => [
+                    'pairs' => [
+                        'type' => Wildcard::class,
+                        'options' => [
+                            'defaults' => [],
+                        ],
+                    ],
+                ],
+            ],
+            'tenant_with_profile' => [
+                'type' => Hostname::class,
+                'options' => [
+                    'route' => ':tenant.example.com',
+                ],
+                'may_terminate' => false,
+                'child_routes' => [
+                    'profile' => [
+                        'type' => Literal::class,
+                        'options' => [
+                            'route' => '/profile',
+                            'defaults' => [
+                                'controller' => DynamicPathController::class,
+                                'action' => 'index',
+                            ],
+                        ],
+                    ],
+                ],
+            ],
+        ],
+    ],
+    'controllers' => [
+        'factories' => [
+            Controller\LoginController::class => LoginControllerFactory::class,
+            Controller\IndexController::class => InvokableFactory::class,
+            DynamicPathController::class => InvokableFactory::class,
+        ],
+    ],
+    'view_manager' => [
+        'display_not_found_reason' => true,
+        'display_exceptions' => true,
+        'doctype' => 'HTML5',
+        'not_found_template' => 'error/404',
+        'exception_template' => 'error/index',
+        'template_map' => [
+            'layout/layout' => __DIR__ . '/../view/layout/layout.phtml',
+            'application/index/index' => __DIR__ . '/../view/application/index/index.phtml',
+            'error/404' => __DIR__ . '/../view/error/404.phtml',
+            'error/index' => __DIR__ . '/../view/error/index.phtml',
+        ],
+        'template_path_stack' => [
+            __DIR__ . '/../view',
+        ],
+    ],
+];
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index 6929b1213f..182aa66daa 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -456,7 +456,9 @@ static function() {
 
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
-                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                    $rawIni = ini_get('datadog.api_security_enabled');
+                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
+                        && ($rawIni === false || filter_var($rawIni, FILTER_VALIDATE_BOOLEAN) !== false)) {
                         // inferSymfonyRouteParams is lightweight (URL parsing only); compute it
                         // first so the cache key encodes which optional params are present.
                         // Without this, a route with optional params caches only the first
diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index 87b68d9578..6d8e1a6dbb 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -735,11 +735,12 @@ function_exists('is_404') && is_404() === false) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $matchedRule;
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
                         $urlPath = \property_exists($This, 'request') ? $This->request : null;
-                        $normalizedRoute = \DDTrace\routing_cache_get($matchedRule);
+                        $cacheKey = $matchedRule . '|' . ($urlPath ?? '');
+                        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                         if ($normalizedRoute === false) {
                             $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
                             if ($normalizedRoute !== null) {
-                                \DDTrace\routing_cache_set($matchedRule, $normalizedRoute);
+                                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
                             }
                         }
                         if ($normalizedRoute !== null && $normalizedRoute !== false) {
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 11f250a66c..063717d81f 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -522,8 +522,8 @@ public static function encodeParamName(string $name): string
      */
     public static function inferSymfonyRouteParams(string $template, string $urlPath): array
     {
-        $templateSegments = array_values(array_filter(explode('/', $template)));
-        $urlSegments      = array_values(array_filter(explode('/', $urlPath)));
+        $templateSegments = array_values(array_filter(explode('/', $template), 'strlen'));
+        $urlSegments      = array_values(array_filter(explode('/', $urlPath), 'strlen'));
 
         $matched = [];
         $urlIdx  = 0;

From 63b1d9b512580e1701b73087fe5a41739d8bf9e8 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 28 Aug 2026 09:38:28 +0200
Subject: [PATCH 39/54] Fix pipeline

---
 src/DDTrace/Util/RouteNormalizer.php          | 53 ++++++++++++++-----
 .../Util/Normalizer/RouteNormalizerTest.php   | 22 ++++++++
 2 files changed, 62 insertions(+), 13 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 063717d81f..d6f2693527 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -68,8 +68,26 @@ public static function normalizeFromLaminas(string $template, array $matchedPara
         }
 
         // Segment routes use :param; Regex routes use %param% (spec format) — handle both.
+        // Detect Regex routes before conversion so we can apply URL-based param filtering.
+        $hasPercentParams = (bool) preg_match('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', $expanded);
         $braceFormat = self::colonParamsToBraces($expanded);
         $braceFormat = self::percentParamsToBraces($braceFormat);
+
+        // For Regex routes the defaults array injects values into matchedParams even for
+        // optional captures absent from the URL (e.g. format='html' when no .html in path).
+        // Use the URL path to determine which params were actually URL-matched.
+        if ($hasPercentParams && $urlPath !== null) {
+            $urlMatchedParams = self::inferSymfonyRouteParams($braceFormat, $urlPath);
+            $braceFormat = preg_replace_callback(
+                '/\{([^}?:]+)\}/',
+                static function ($m) use ($urlMatchedParams) {
+                    return array_key_exists($m[1], $urlMatchedParams) ? $m[0] : '{' . $m[1] . '?}';
+                },
+                $braceFormat
+            );
+            return self::normalizeBraceRoute($braceFormat, $urlMatchedParams);
+        }
+
         return self::normalizeBraceRoute($braceFormat, $matchedParams);
     }
 
@@ -537,24 +555,33 @@ public static function inferSymfonyRouteParams(string $template, string $urlPath
                 $urlIdx++;
             } elseif (preg_match('/\{/', $seg)) {
                 // Mixed segment (static text + one or more params): determine presence by
-                // trying to match the URL segment against the template pattern.
+                // trying to match the URL segment, dropping trailing optional params as needed.
                 if ($urlIdx < count($urlSegments)) {
                     preg_match_all('/\{([^}?:]+)\}/', $seg, $pm);
-                    $paramNames = $pm[1];
-                    if (!empty($paramNames)) {
-                        // Build a lightweight regex from the template segment
+                    $paramNames  = $pm[1];
+                    $n           = count($paramNames);
+                    if ($n > 0) {
+                        $urlSeg      = $urlSegments[$urlIdx];
                         $staticParts = preg_split('/\{[^}]+\}/', $seg);
-                        $regexParts  = array_map(
-                            static function ($p) { return preg_quote($p, '/'); },
-                            $staticParts
-                        );
-                        $segRegex = '/^' . implode('(.+)', $regexParts) . '$/';
-                        if (@preg_match($segRegex, $urlSegments[$urlIdx])) {
-                            foreach ($paramNames as $p) {
-                                $matched[$p] = true;
+                        // Try with k params (k = n, n-1, ..., 1). Drop params from the right
+                        // until the URL segment matches. This handles optional trailing captures
+                        // that were injected as route defaults but absent from the URL.
+                        for ($k = $n; $k >= 1; $k--) {
+                            $regexBody = '';
+                            for ($i = 0; $i < $k; $i++) {
+                                $regexBody .= preg_quote($staticParts[$i], '/') . '(.+)';
+                            }
+                            // Only include the trailing static part for a full match
+                            if ($k === $n) {
+                                $regexBody .= preg_quote($staticParts[$n], '/');
+                            }
+                            if (@preg_match('/^' . $regexBody . '$/', $urlSeg)) {
+                                for ($i = 0; $i < $k; $i++) {
+                                    $matched[$paramNames[$i]] = true;
+                                }
+                                break;
                             }
                         }
-                        // else: URL segment doesn't contain the dynamic part → params absent
                     }
                 }
                 $urlIdx++;
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 4a8897ee87..dc58d65bbd 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -279,6 +279,28 @@ public function testLaminasRegexRouteSpec()
         $this->assertSame('/user/{id}/{name}', RouteNormalizer::normalizeFromLaminas('/user/%id%/%name%'));
     }
 
+    public function testLaminasRegexRouteOptionalFormatAbsent()
+    {
+        // Route defaults inject format='html' even when the URL has no .html extension.
+        // Only params actually present in the URL path should appear in the normalized route.
+        $result = RouteNormalizer::normalizeFromLaminas(
+            '/normalized-regex/%id%.%format%',
+            ['id' => 'article', 'format' => 'html', 'controller' => 'C', 'action' => 'index'],
+            '/normalized-regex/article'
+        );
+        $this->assertSame('/normalized-regex/{id}', $result);
+    }
+
+    public function testLaminasRegexRouteOptionalFormatPresent()
+    {
+        $result = RouteNormalizer::normalizeFromLaminas(
+            '/normalized-regex/%id%.%format%',
+            ['id' => 'article', 'format' => 'html', 'controller' => 'C', 'action' => 'index'],
+            '/normalized-regex/article.html'
+        );
+        $this->assertSame('/normalized-regex/{id+format}', $result);
+    }
+
     public function testLaminasLiteralRoute()
     {
         $this->assertSame('/dump-request', RouteNormalizer::normalizeFromLaminas('/dump-request'));

From 02455f27041d3431fe13fcd11ec9ec00df534050 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 28 Aug 2026 18:10:40 +0200
Subject: [PATCH 40/54] Address report comments

---
 .../Laminas/LaminasIntegration.php            | 40 +++++++++++--
 .../Laravel/LaravelIntegration.php            | 38 +++++++++++--
 .../WordPress/WordPressIntegrationLoader.php  | 17 +++++-
 src/DDTrace/Util/RouteNormalizer.php          | 56 +++++++++++++------
 .../Util/Normalizer/RouteNormalizerTest.php   | 37 ++++++++++++
 5 files changed, 159 insertions(+), 29 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 33ff191110..ccff860b72 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -285,12 +285,40 @@ static function (SpanData $span) use ($controller, $action) {
                         if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
                             $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
                             $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
-                            // Only include the URL in the key when the template has optional
-                            // bracket sections; for fully-required routes the normalized form
-                            // is the same for every request regardless of param values.
-                            $cacheKey = strpos($httpRoute, '[') !== false
-                                ? $httpRoute . '|' . ($urlPath ?? '')
-                                : $httpRoute;
+                            // Build a stable cache key that encodes only which optional
+                            // components participated, not the raw URL (which would cause
+                            // one cache entry per distinct request value — 500-entry churn).
+                            //
+                            // Regex routes (%param% spec): infer which params appear in the
+                            // URL and encode their sorted names as a presence key.
+                            // Bracket routes ([/:param]): collect optional colon-params whose
+                            // values appear in the URL as a presence key.
+                            // Fully-required routes: template alone is sufficient.
+                            if ($urlPath !== null && strpos($httpRoute, '%') !== false) {
+                                // Regex route: convert spec to brace form and infer presence
+                                $braceTemp = preg_replace('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', '{$1}', $httpRoute);
+                                $urlMatchedKeys = array_keys(
+                                    \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($braceTemp, $urlPath)
+                                );
+                                sort($urlMatchedKeys);
+                                $cacheKey = $httpRoute . '#' . implode(',', $urlMatchedKeys);
+                            } elseif (strpos($httpRoute, '[') !== false) {
+                                // Bracket-optional route: encode which optional colon-params
+                                // have values that appear in the URL path.
+                                preg_match_all('/:([a-zA-Z_][a-zA-Z0-9_-]*)/', $httpRoute, $_pm);
+                                $_present = [];
+                                foreach ($_pm[1] as $_p) {
+                                    if (isset($allParams[$_p]) && $urlPath !== null &&
+                                        strpos($urlPath, (string)$allParams[$_p]) !== false) {
+                                        $_present[] = $_p;
+                                    }
+                                }
+                                sort($_present);
+                                $cacheKey = $httpRoute . '#' . implode(',', $_present);
+                                unset($_pm, $_present, $_p);
+                            } else {
+                                $cacheKey = $httpRoute;
+                            }
                             $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                             if ($normalizedRoute === false) {
                                 $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index 7c0bfe80e9..a71eed6f23 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -807,21 +807,49 @@ private static function laravelUrlMatchedParams(string $routeUri, string $urlPat
         $urlIdx    = 0;
 
         foreach ($routeSegs as $seg) {
-            if (preg_match('/^\{([^}?]+)\?\}$/', $seg, $m)) {
-                // Optional param — include only when URL has a segment at this position
+            if (preg_match('/^\{([^}?:]+)\?\}$/', $seg, $m)) {
+                // Whole-segment optional param
                 if ($urlIdx < count($urlSegs) && $urlSegs[$urlIdx] !== '') {
                     if (array_key_exists($m[1], $allParams)) {
                         $matched[$m[1]] = $allParams[$m[1]];
                     }
                     $urlIdx++;
                 }
-            } elseif (preg_match('/^\{([^}]+)\}$/', $seg)) {
-                // Required param — always present
-                preg_match('/^\{([^}]+)\}$/', $seg, $m);
+            } elseif (preg_match('/^\{([^}?:]+)\}$/', $seg, $m)) {
+                // Whole-segment required param — always present
                 if (array_key_exists($m[1], $allParams)) {
                     $matched[$m[1]] = $allParams[$m[1]];
                 }
                 $urlIdx++;
+            } elseif (strpos($seg, '{') !== false) {
+                // Mixed segment (e.g. "{name}.{ext?}"): use progressive regex matching
+                // to determine which params (including optional ones) appear in the URL.
+                if ($urlIdx < count($urlSegs) && $urlSegs[$urlIdx] !== '') {
+                    preg_match_all('/\{([^}?:]+)(\?)?\}/', $seg, $pm, PREG_SET_ORDER);
+                    $paramNames  = array_map(static function($m) { return $m[1]; }, $pm);
+                    $staticParts = preg_split('/\{[^}]+\}/', $seg);
+                    $n           = count($paramNames);
+                    $urlSeg      = $urlSegs[$urlIdx];
+
+                    for ($k = $n; $k >= 1; $k--) {
+                        $regexBody = '';
+                        for ($ri = 0; $ri < $k; $ri++) {
+                            $regexBody .= preg_quote($staticParts[$ri], '/') . '(.+)';
+                        }
+                        if ($k === $n) {
+                            $regexBody .= preg_quote($staticParts[$n], '/');
+                        }
+                        if (@preg_match('/^' . $regexBody . '$/', $urlSeg)) {
+                            for ($ri = 0; $ri < $k; $ri++) {
+                                if (array_key_exists($paramNames[$ri], $allParams)) {
+                                    $matched[$paramNames[$ri]] = $allParams[$paramNames[$ri]];
+                                }
+                            }
+                            break;
+                        }
+                    }
+                }
+                $urlIdx++;
             } else {
                 $urlIdx++;
             }
diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index 6d8e1a6dbb..9cf64cf194 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -735,7 +735,22 @@ function_exists('is_404') && is_404() === false) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $matchedRule;
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
                         $urlPath = \property_exists($This, 'request') ? $This->request : null;
-                        $cacheKey = $matchedRule . '|' . ($urlPath ?? '');
+                        // Key on the count of matched capture groups, not the full URL,
+                        // so all requests with the same optional-capture participation
+                        // share one cache entry rather than one entry per distinct URL.
+                        $wpMatchedGroupCount = null;
+                        if ($urlPath !== null) {
+                            if (@preg_match('#^' . $matchedRule . '#', ltrim($urlPath, '/'), $_wpc)) {
+                                $wpMatchedGroupCount = 0;
+                                for ($_wi = 1; $_wi < count($_wpc); $_wi++) {
+                                    if (isset($_wpc[$_wi]) && $_wpc[$_wi] !== '') {
+                                        $wpMatchedGroupCount = $_wi;
+                                    }
+                                }
+                                unset($_wpc, $_wi);
+                            }
+                        }
+                        $cacheKey = $matchedRule . '#' . ($wpMatchedGroupCount ?? 'n');
                         $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                         if ($normalizedRoute === false) {
                             $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index d6f2693527..449618b00a 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -105,15 +105,16 @@ static function ($m) use ($urlMatchedParams) {
      */
     public static function normalizeFromWordPress(string $matchedRule, $urlPath = null)
     {
-        // Re-run the regex against the actual URL to find how many capture groups matched.
-        // This handles optional groups like (?:/([0-9]+))? that may or may not be present.
-        $matchedGroupCount = null;
+        // Re-run the regex against the actual URL to find which capture groups matched.
+        // Tracks each group individually so gaps from optional groups (e.g. (?:(...))?)
+        // that didn't participate are skipped instead of emitting phantom params.
+        $matchedGroups = null;
         if ($urlPath !== null) {
             if (@preg_match('#^' . $matchedRule . '#', ltrim($urlPath, '/'), $captures)) {
-                $matchedGroupCount = 0;
+                $matchedGroups = [];
                 for ($i = 1; $i < count($captures); $i++) {
                     if (isset($captures[$i]) && $captures[$i] !== '') {
-                        $matchedGroupCount = $i;
+                        $matchedGroups[$i] = true;
                     }
                 }
             }
@@ -150,9 +151,10 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
                 $dynamicPart = substr($segment, $prefixLen);
                 $groupCount = self::countCaptureGroups($dynamicPart);
 
-                // Only emit a static prefix when there is at most one capture group;
-                // mixed segments with multiple groups are treated as fully dynamic.
-                if ($prefixLen > 0 && $groupCount <= 1) {
+                // Only emit a static prefix for purely-regex segments with no capture
+                // groups. When captures exist the whole segment (prefix + captures) maps
+                // to one RFC element, so the prefix must not become a separate element.
+                if ($prefixLen > 0 && $groupCount === 0) {
                     $staticPart = rtrim(substr($segment, 0, $prefixLen), '/-._');
                     if ($staticPart !== '') {
                         $normalizedSegments[] = self::encodeStaticSegment($staticPart);
@@ -160,15 +162,17 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
                 }
 
                 if ($groupCount === 0) {
-                    if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
+                    if ($matchedGroups !== null && !isset($matchedGroups[$paramIndex])) {
+                        $paramIndex++;
                         continue;
                     }
                     $normalizedSegments[] = '{param' . $paramIndex++ . '}';
                 } else {
                     $params = [];
                     for ($j = 0; $j < $groupCount; $j++) {
-                        if ($matchedGroupCount !== null && $paramIndex > $matchedGroupCount) {
-                            break;
+                        if ($matchedGroups !== null && !isset($matchedGroups[$paramIndex])) {
+                            $paramIndex++;
+                            continue;
                         }
                         $params[] = 'param' . $paramIndex++;
                     }
@@ -344,8 +348,9 @@ private static function normalizeBraceSegment(string $segment, array $matchedPar
         if (empty($paramNames)) {
             // All params were optional and absent.
             // Preserve any static text remaining in the segment (e.g. "search.{_format?}" → "search").
+            // rtrim only: a leading special char (e.g. '~foo.{ext?}') must survive.
             $staticOnly = preg_replace('/\{[^}]+\}/', '', $segment);
-            $staticOnly = trim($staticOnly, '.-_~');
+            $staticOnly = rtrim($staticOnly, '.-_~');
             if ($staticOnly !== '') {
                 return self::encodeStaticSegment($staticOnly);
             }
@@ -406,10 +411,16 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                     if ($urlPath !== null) {
                         // Substitute every param value before checking the URL so that
                         // multi-param sections like [/:year/:month] are found correctly.
+                        // Use a word-boundary-aware replacement so :id is not replaced
+                        // inside :id2 (str_replace(':id', ...) would corrupt ':id2').
                         $innerWithValues = $inner;
                         foreach ($innerParams as $param) {
                             $value = (string)$matchedParams[$param];
-                            $innerWithValues = str_replace($paramPrefix . $param, $value, $innerWithValues);
+                            $innerWithValues = preg_replace(
+                                '/' . preg_quote($paramPrefix . $param, '/') . '(?![a-zA-Z0-9_-])/',
+                                $value,
+                                $innerWithValues
+                            );
                         }
                         if (strpos($urlPath, $innerWithValues) !== false) {
                             return $inner;
@@ -418,7 +429,11 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                         $innerEncoded = $inner;
                         foreach ($innerParams as $param) {
                             $value = rawurlencode((string)$matchedParams[$param]);
-                            $innerEncoded = str_replace($paramPrefix . $param, $value, $innerEncoded);
+                            $innerEncoded = preg_replace(
+                                '/' . preg_quote($paramPrefix . $param, '/') . '(?![a-zA-Z0-9_-])/',
+                                $value,
+                                $innerEncoded
+                            );
                         }
                         if (strpos($urlPath, $innerEncoded) !== false) {
                             return $inner;
@@ -467,8 +482,10 @@ private static function uniqueParamName(string $template, string $paramPrefix =
     {
         $i = 1;
         while (
-            strpos($template, $paramPrefix . 'param' . $i) !== false ||
-            strpos($template, '{param' . $i . '}') !== false
+            // Use regex so ':param1' doesn't falsely match inside ':param10'
+            preg_match('/' . preg_quote($paramPrefix . 'param' . $i, '/') . '(?![0-9])/', $template) ||
+            strpos($template, '{param' . $i . '}') !== false ||
+            strpos($template, '%param' . $i . '%') !== false
         ) {
             $i++;
         }
@@ -541,7 +558,12 @@ public static function encodeParamName(string $name): string
     public static function inferSymfonyRouteParams(string $template, string $urlPath): array
     {
         $templateSegments = array_values(array_filter(explode('/', $template), 'strlen'));
-        $urlSegments      = array_values(array_filter(explode('/', $urlPath), 'strlen'));
+        // Decode percent-encoded URL path so template literals (e.g. café) compare
+        // correctly against encoded URL segments (e.g. caf%C3%A9).
+        $urlSegments = array_values(array_filter(
+            array_map('rawurldecode', explode('/', $urlPath)),
+            'strlen'
+        ));
 
         $matched = [];
         $urlIdx  = 0;
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index dc58d65bbd..c945920655 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -367,6 +367,43 @@ public function testWordPressMultipleCaptureGroupsInOneSegment()
         $this->assertSame('/{param1+param2}', $result);
     }
 
+    public function testWordPressStaticPrefixNotSeparateElement()
+    {
+        // F-07: static prefix before a capture must NOT become a separate segment element.
+        // "post-([^/]+)" is a single URL segment → one RFC element.
+        $result = RouteNormalizer::normalizeFromWordPress('^post-([^/]+)$', 'post-hello');
+        $this->assertSame('/{param1}', $result);
+    }
+
+    public function testWordPressAbsentOptionalCaptureSkipped()
+    {
+        // F-11: when an inner optional capture did not participate (empty string in captures),
+        // it must not produce a phantom {paramN}.
+        $result = RouteNormalizer::normalizeFromWordPress('^(?:([^/]+)-)?([^/]+)$', 'x');
+        $this->assertSame('/{param2}', $result);
+    }
+
+    public function testWordPressBothCapturesPresentInOptionalGroup()
+    {
+        $result = RouteNormalizer::normalizeFromWordPress('^(?:([^/]+)-)?([^/]+)$', 'foo-x');
+        $this->assertSame('/{param1+param2}', $result);
+    }
+
+    public function testStaticPrefixLeadingTildePreservedWhenOptionalAbsent()
+    {
+        // F-04: rtrim — a leading special char like '~' must survive when the optional
+        // param is absent. Old behaviour: trim('~foo.', '.-_~') = 'foo'. Fixed: rtrim.
+        $result = RouteNormalizer::normalizeFromLaravel('~foo.{ext?}', []);
+        $this->assertSame('/~foo', $result);
+    }
+
+    public function testLaminasWildcardAfterPercentParam()
+    {
+        // F-10: uniqueParamName must skip %param1% when choosing a name for the wildcard.
+        $result = RouteNormalizer::normalizeFromLaminas('/foo/%param1%/*');
+        $this->assertSame('/foo/{param1}/{param2}', $result);
+    }
+
     // RFC examples
 
     public function testRfcExampleFastApi()

From 2385d72f6c979bfa8a4126b6d830cd4e947bdfd8 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 1 Sep 2026 10:17:57 +0200
Subject: [PATCH 41/54] Add new tests

---
 .../php/integration/Laminas33Tests.groovy     | 177 +++++++++++++++++-
 .../php/integration/Laravel8xTests.groovy     |  53 +++++-
 .../php/integration/Symfony62Tests.groovy     |  24 +++
 .../php/integration/WordPressTests.groovy     |  89 +++++++++
 .../Application/config/module.config.php      |  54 ++++++
 .../src/Controller/DynamicPathController.php  |  11 ++
 .../Laravel/Version_8_x/routes/web.php        |   6 +
 .../src/Controller/HomeController.php         |  15 ++
 .../mu-plugins/normalized-route-test.php      |  15 ++
 9 files changed, 437 insertions(+), 7 deletions(-)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
index b9f2de1008..1b1f119fcb 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
@@ -81,7 +81,7 @@ class Laminas33Tests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 32
+        assert endpoints.size() == 37
         assert endpoints.find { it.path == '/' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /' } != null
         assert endpoints.find {
             it.path == '/application[/:action]' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /application[/:action]'
@@ -143,6 +143,12 @@ class Laminas33Tests {
             it.path == '/normalized-regex/%id%.%format%' && it.method == '*' &&
                     it.operationName == 'http.request' && it.resourceName == '* /normalized-regex/%id%.%format%'
         } != null
+        assert endpoints.find {
+            it.path == '/normalized-regex-ambiguous/%name%.%ext%' &&
+                    it.method == '*' && it.operationName == 'http.request' &&
+                    it.resourceName ==
+                    '* /normalized-regex-ambiguous/%name%.%ext%'
+        } != null
         assert endpoints.find {
             it.path == '/normalized-encoded[/:slug]' && it.method == '*' &&
                     it.operationName == 'http.request' && it.resourceName == '* /normalized-encoded[/:slug]'
@@ -151,6 +157,26 @@ class Laminas33Tests {
             it.path == '/normalized-static[/draft]' && it.method == '*' &&
                     it.operationName == 'http.request' && it.resourceName == '* /normalized-static[/draft]'
         } != null
+        assert endpoints.find {
+            it.path == '/normalized-static-prefix[/normalized]' && it.method == '*' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == '* /normalized-static-prefix[/normalized]'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-dynamic-prefix[/:value]' && it.method == '*' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == '* /normalized-dynamic-prefix[/:value]'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-encoded-cache[/:slug]' && it.method == '*' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == '* /normalized-encoded-cache[/:slug]'
+        } != null
+        assert endpoints.find {
+            it.path == '/normalized-encoded-lowercase[/:slug]' && it.method == '*' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == '* /normalized-encoded-lowercase[/:slug]'
+        } != null
         assert endpoints.find {
             it.path == '/normalized-name/:user-id' && it.method == '*' &&
                     it.operationName == 'http.request' && it.resourceName == '* /normalized-name/:user-id'
@@ -395,19 +421,111 @@ class Laminas33Tests {
 
     @Test
     @Order(15)
-    void 'static-only optional segment absent is omitted'() {
+    void 'lowercase percent escapes retain an optional matched value'() {
         Trace trace = container.traceFromRequest(
-                container.buildReq('/normalized-static').GET().build(),
+                container.buildReq('/normalized-encoded-lowercase/%c3%a9').GET().build(),
                 ofString()) { HttpResponse<String> resp ->
             assert resp.statusCode() == 200
         }
 
-        assert trace.first().meta.'http.route' == '/normalized-static[/draft]'
-        assert trace.first().meta.'_dd.appsec.normalized_route' == '/normalized-static'
+        assert trace.first().meta.'http.route' ==
+                '/normalized-encoded-lowercase[/:slug]'
+        assert trace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized-encoded-lowercase/{slug}'
     }
 
     @Test
     @Order(16)
+    void 'static optional text is matched only at its route position'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized-static-prefix').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert trace.first().meta.'http.route' ==
+                '/normalized-static-prefix[/normalized]'
+        // The optional suffix is absent. Its text happens to be a prefix of
+        // the mandatory segment and must not be detected there.
+        assert trace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized-static-prefix'
+    }
+
+    @Test
+    @Order(17)
+    void 'defaulted optional value is matched only at its route position'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized-dynamic-prefix').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert trace.first().meta.'http.route' ==
+                '/normalized-dynamic-prefix[/:value]'
+        // The framework-injected default equals earlier static route text. It
+        // does not mean the optional URL segment participated in this request.
+        // Laminas merges defaults and captures in RouteMatch, so RFC-1103 also
+        // permits omitting the tag when accurate participation is unavailable.
+        String normalizedRoute = trace.first().meta.'_dd.appsec.normalized_route'
+        assert normalizedRoute == null ||
+                normalizedRoute == '/normalized-dynamic-prefix'
+    }
+
+    @Test
+    @Order(18)
+    void 'encoded optional presence is not poisoned by a prior cache shape'() {
+        // The lowercase request is known to be misclassified as absent. It
+        // primes the result cache with the absent shape; the next request has
+        // an uppercase encoding that normalizes correctly when run alone.
+        container.traceFromRequest(
+                container.buildReq('/normalized-encoded-cache/%c3%a9').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        Trace presentTrace = container.traceFromRequest(
+                container.buildReq('/normalized-encoded-cache/a%20b').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert presentTrace.first().meta.'http.route' ==
+                '/normalized-encoded-cache[/:slug]'
+        assert presentTrace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized-encoded-cache/{slug}'
+    }
+
+    @Test
+    @Order(19)
+    void 'static-only optional shapes do not share a cached result'() {
+        Trace absentTrace = container.traceFromRequest(
+                container.buildReq('/normalized-static').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert absentTrace.first().meta.'http.route' ==
+                '/normalized-static[/draft]'
+        assert absentTrace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized-static'
+
+        Trace presentTrace = container.traceFromRequest(
+                container.buildReq('/normalized-static/draft').GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+        }
+
+        assert presentTrace.first().meta.'http.route' ==
+                '/normalized-static[/draft]'
+        // The cache suffix contains only optional parameter names. This route's
+        // optional group is purely static, so absent and present both use the
+        // same key even though they require different normalized results.
+        assert presentTrace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized-static/draft'
+    }
+
+    @Test
+    @Order(20)
     void 'hyphenated segment parameter name remains intact'() {
         Trace trace = container.traceFromRequest(
                 container.buildReq('/normalized-name/alice').GET().build(),
@@ -420,7 +538,7 @@ class Laminas33Tests {
     }
 
     @Test
-    @Order(17)
+    @Order(21)
     void 'wildcard placeholder does not collide with an existing parameter name'() {
         Trace trace = container.traceFromRequest(
                 container.buildReq('/normalized-wildcard/value/foo/bar').GET().build(),
@@ -433,4 +551,51 @@ class Laminas33Tests {
                 '/normalized-wildcard/{param1}/{param2}'
     }
 
+    @Test
+    @Order(22)
+    void 'Regex constraints distinguish an absent defaulted parameter'() {
+        Trace trace = container.traceFromRequest(
+                container.buildReq('/normalized-regex-ambiguous/report.txt')
+                        .GET().build(),
+                ofString()) { HttpResponse<String> resp ->
+            assert resp.statusCode() == 200
+            assert resp.body() == 'report.txt/html'
+        }
+
+        assert trace.first().meta.'http.route' ==
+                '/normalized-regex-ambiguous/%name%.%ext%'
+        // The route regex accepts only pdf or json as ext, so report.txt is
+        // consumed entirely by name and ext comes only from its html default.
+        // Generic URL inference ignores that regex and treats txt as matched.
+        assert trace.first().meta.'_dd.appsec.normalized_route' ==
+                '/normalized-regex-ambiguous/{name}'
+    }
+
+    @Test
+    @Order(23)
+    void 'normalized route is absent when API Security is disabled'() {
+        try {
+            def res = CONTAINER.execInContainer(
+                    'bash', '-c',
+                    '''echo export DD_API_SECURITY_ENABLED=false >> /etc/apache2/envvars;
+                       service apache2 restart''')
+            assert res.exitCode == 0
+
+            Trace trace = container.traceFromRequest(
+                    container.buildReq('/application').GET().build(),
+                    ofString()) { HttpResponse<String> resp ->
+                assert resp.statusCode() == 200
+            }
+
+            assert trace.first().meta.'http.route' == '/application[/:action]'
+            assert trace.first().meta.'_dd.appsec.normalized_route' == null
+        } finally {
+            def res = CONTAINER.execInContainer(
+                    'bash', '-c',
+                    '''sed -i '/export DD_API_SECURITY_ENABLED=/d' /etc/apache2/envvars;
+                       service apache2 restart''')
+            assert res.exitCode == 0
+        }
+    }
+
 }
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
index dcf633a41d..77bdab25f1 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laravel8xTests.groovy
@@ -212,7 +212,7 @@ class Laravel8xTests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 29
+        assert endpoints.size() == 30
         assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null
         assert endpoints.find { it.path == 'login/auth' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET login/auth' } != null
         assert endpoints.find { it.path == 'login/signup' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET login/signup' } != null
@@ -220,6 +220,11 @@ class Laravel8xTests {
         assert endpoints.find { it.path == 'api/user' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET api/user' } != null
         assert endpoints.find { it.path == 'normalized-optional/{value?}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET normalized-optional/{value?}' } != null
         assert endpoints.find { it.path == 'normalized-default/{format?}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET normalized-default/{format?}' } != null
+        assert endpoints.find {
+            it.path == 'normalized-ambiguous/{name}.{ext?}' && it.method == 'GET' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == 'GET normalized-ambiguous/{name}.{ext?}'
+        } != null
     }
 
     @Test
@@ -266,4 +271,50 @@ class Laravel8xTests {
         assert span.meta.'http.route' == 'normalized-default/{format?}'
         assert span.meta.'_dd.appsec.normalized_route' == '/normalized-default'
     }
+
+    @Test
+    @Order(13)
+    void 'route requirements distinguish an absent defaulted mixed parameter'() {
+        HttpRequest req = container.buildReq('/normalized-ambiguous/report.txt').GET().build()
+        Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+            assert re.body() == 'report.txt/html'
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' ==
+                'normalized-ambiguous/{name}.{ext?}'
+        // Laravel matched all of "report.txt" as name because ext only accepts
+        // pdf or json, then supplied the default ext. The integration ignores
+        // those requirements and infers ext participation from the dot alone.
+        assert span.meta.'_dd.appsec.normalized_route' ==
+                '/normalized-ambiguous/{name}'
+    }
+
+    @Test
+    @Order(14)
+    void 'normalized route is absent when API Security is disabled'() {
+        try {
+            def res = CONTAINER.execInContainer(
+                    'bash', '-c',
+                    '''echo export DD_API_SECURITY_ENABLED=false >> /etc/apache2/envvars;
+                       service apache2 restart''')
+            assert res.exitCode == 0
+
+            HttpRequest req = container.buildReq('/normalized-optional/hello').GET().build()
+            Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
+                assert re.statusCode() == 200
+            }
+
+            Span span = trace.first()
+            assert span.meta.'http.route' == 'normalized-optional/{value?}'
+            assert span.meta.'_dd.appsec.normalized_route' == null
+        } finally {
+            def res = CONTAINER.execInContainer(
+                    'bash', '-c',
+                    '''sed -i '/export DD_API_SECURITY_ENABLED=/d' /etc/apache2/envvars;
+                       service apache2 restart''')
+            assert res.exitCode == 0
+        }
+    }
 }
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
index 9e262df577..93aa09d2e7 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
@@ -252,6 +252,11 @@ class Symfony62Tests {
                     it.operationName == 'http.request' &&
                     it.resourceName == 'GET /normalized/utf8/{föo}'
         } != null
+        assert endpoints.find {
+            it.path == '/normalized/ambiguous/{slug}.{format}' && it.method == 'GET' &&
+                    it.operationName == 'http.request' &&
+                    it.resourceName == 'GET /normalized/ambiguous/{slug}.{format}'
+        } != null
     }
 
     @Test
@@ -367,4 +372,23 @@ class Symfony62Tests {
         assert span.meta.'http.route' == '/article/{slug}.{_format}'
         assert span.meta.'_dd.appsec.normalized_route' == '/article/{slug+_format}'
     }
+
+    @Test
+    @Order(18)
+    void 'route requirements distinguish an absent defaulted mixed parameter'() {
+        HttpRequest req = container.buildReq('/normalized/ambiguous/foo.bar').GET().build()
+        Trace trace = container.traceFromRequest(req, ofString()) { HttpResponse<String> re ->
+            assert re.statusCode() == 200
+            assert re.body() == 'Ambiguous mixed route: foo.bar/html'
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' ==
+                '/normalized/ambiguous/{slug}.{format}'
+        // Symfony matched the entire "foo.bar" value as slug and supplied
+        // format from its default. URL-only inference ignores the framework
+        // requirements and incorrectly treats "bar" as a matched format.
+        assert span.meta.'_dd.appsec.normalized_route' ==
+                '/normalized/ambiguous/{slug}'
+    }
 }
diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy
index fce971816f..3af1236b86 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/WordPressTests.groovy
@@ -239,4 +239,93 @@ class WordPressTests {
         assert presentSpan.meta.'_dd.appsec.normalized_route' ==
                 '/normalized-cache-shape/{param1}'
     }
+
+    @Test
+    @Order(8)
+    void 'escaped regex literals remain static route text'() {
+        Trace trace = CONTAINER.traceFromRequest('/normalized-literal/file.json/') {
+            HttpResponse<InputStream> response ->
+                assert response.statusCode() == 200
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' == '^normalized-literal/file\\.json$'
+        assert span.meta.'_dd.appsec.normalized_route' ==
+                '/normalized-literal/file.json'
+    }
+
+    @Test
+    @Order(9)
+    void 'capture participation holes do not share a cached result shape'() {
+        Trace absentTrace = CONTAINER.traceFromRequest(
+                '/normalized-capture-hole/tail/') {
+            HttpResponse<InputStream> response ->
+                assert response.statusCode() == 200
+        }
+
+        Span absentSpan = absentTrace.first()
+        assert absentSpan.meta.'http.route' ==
+                '^normalized-capture-hole/(?:([^/]+)-)?([^/]+)$'
+        assert absentSpan.meta.'_dd.appsec.normalized_route' ==
+                '/normalized-capture-hole/{param2}'
+
+        Trace presentTrace = CONTAINER.traceFromRequest(
+                '/normalized-capture-hole/head-tail/') {
+            HttpResponse<InputStream> response ->
+                assert response.statusCode() == 200
+        }
+
+        Span presentSpan = presentTrace.first()
+        assert presentSpan.meta.'http.route' ==
+                '^normalized-capture-hole/(?:([^/]+)-)?([^/]+)$'
+        // Both requests have capture 2 as their highest participating index,
+        // but only this request includes capture 1. A highest-index cache key
+        // serves the absent shape cached by the preceding request.
+        assert presentSpan.meta.'_dd.appsec.normalized_route' ==
+                '/normalized-capture-hole/{param1+param2}'
+    }
+
+    @Test
+    @Order(10)
+    void 'named regex captures are counted and retain their framework name'() {
+        Trace trace = CONTAINER.traceFromRequest(
+                '/normalized-named-captures/first-second/') {
+            HttpResponse<InputStream> response ->
+                assert response.statusCode() == 200
+        }
+
+        Span span = trace.first()
+        assert span.meta.'http.route' ==
+                '^normalized-named-captures/(?P<first>[^/]+)-' +
+                '(?P<second>[^/]+)/?$'
+        // Both named captures share one URL segment and must be present in its
+        // combined element. RFC-1103 does not define whether a route accepting
+        // both terminal-slash forms should retain '/', so accept either form.
+        String normalizedRoute = span.meta.'_dd.appsec.normalized_route'
+        assert normalizedRoute ==
+                '/normalized-named-captures/{first+second}' ||
+                normalizedRoute ==
+                '/normalized-named-captures/{first+second}/'
+    }
+
+    @Test
+    @Order(11)
+    void 'normalized route is absent when API Security is disabled'() {
+        PhpFpm fpm = new PhpFpm(CONTAINER)
+        try {
+            fpm.restart(['DD_API_SECURITY_ENABLED': 'false'])
+
+            Trace trace = CONTAINER.traceFromRequest('/normalized-cache/') {
+                HttpResponse<InputStream> response ->
+                    assert response.statusCode() == 200
+            }
+
+            Span span = trace.first()
+            assert span.meta.'http.route' ==
+                    '^normalized-cache(?:/([^/]+))?/?$'
+            assert span.meta.'_dd.appsec.normalized_route' == null
+        } finally {
+            fpm.restart()
+        }
+    }
 }
diff --git a/appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php b/appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php
index d6aca885d3..f495c34ed2 100644
--- a/appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php
+++ b/appsec/tests/integration/src/test/www/laminas33/module/Application/config/module.config.php
@@ -192,6 +192,19 @@
                     ],
                 ],
             ],
+            'regex_ambiguous_default' => [
+                'type' => Regex::class,
+                'options' => [
+                    'regex' => '/normalized-regex-ambiguous/' .
+                        '(?P<name>.+)(?:\.(?P<ext>pdf|json))?',
+                    'spec' => '/normalized-regex-ambiguous/%name%.%ext%',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'ambiguous',
+                        'ext' => 'html',
+                    ],
+                ],
+            ],
             'normalized_encoded_optional' => [
                 'type' => Segment::class,
                 'options' => [
@@ -215,6 +228,47 @@
                     ],
                 ],
             ],
+            'normalized_static_prefix_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-static-prefix[/normalized]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_dynamic_prefix_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-dynamic-prefix[/:value]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                        'value' => 'normalized-dynamic-prefix',
+                    ],
+                ],
+            ],
+            'normalized_encoded_cache_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-encoded-cache[/:slug]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_encoded_lowercase_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-encoded-lowercase[/:slug]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
             'normalized_hyphenated_name' => [
                 'type' => Segment::class,
                 'options' => [
diff --git a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/src/Controller/DynamicPathController.php b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/src/Controller/DynamicPathController.php
index 347a8287c6..d69186c013 100644
--- a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/src/Controller/DynamicPathController.php
+++ b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/src/Controller/DynamicPathController.php
@@ -8,6 +8,17 @@
 
 class DynamicPathController extends AbstractActionController
 {
+    public function ambiguousAction()
+    {
+        $routeMatch = $this->getEvent()->getRouteMatch();
+        $name = $routeMatch->getParam('name');
+        $ext = $routeMatch->getParam('ext');
+
+        $response = $this->getResponse();
+        $response->setContent("$name/$ext");
+        return $response;
+    }
+
     public function indexAction()
     {
         $response = $this->getResponse();
diff --git a/tests/Frameworks/Laravel/Version_8_x/routes/web.php b/tests/Frameworks/Laravel/Version_8_x/routes/web.php
index f2266c991b..9b74766632 100644
--- a/tests/Frameworks/Laravel/Version_8_x/routes/web.php
+++ b/tests/Frameworks/Laravel/Version_8_x/routes/web.php
@@ -64,3 +64,9 @@
 Route::get('/normalized-default/{format?}', function ($format = null) {
     return response($format);
 })->defaults('format', 'html');
+
+Route::get('/normalized-ambiguous/{name}.{ext?}', function ($name, $ext = null) {
+    return response($name . '/' . ($ext ?? 'absent'));
+})->where('name', '.+')
+    ->where('ext', 'pdf|json')
+    ->defaults('ext', 'html');
diff --git a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
index 94d8189ea4..dd1da99a1c 100644
--- a/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
+++ b/tests/Frameworks/Symfony/Version_6_2/src/Controller/HomeController.php
@@ -83,4 +83,19 @@ public function normalizedUtf8OptionalAction(Request $request)
     {
         return new Response('UTF-8 parameter route');
     }
+
+    #[Route(
+        "/normalized/ambiguous/{slug}.{format}",
+        name: "normalized_ambiguous_mixed",
+        defaults: ["format" => "html"],
+        requirements: ["slug" => ".+", "format" => "html|json"]
+    )]
+    public function normalizedAmbiguousMixedAction(
+        Request $request,
+        string $slug,
+        string $format
+    )
+    {
+        return new Response("Ambiguous mixed route: $slug/$format");
+    }
 }
diff --git a/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php b/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php
index f315c9e0ff..226cdb6dae 100644
--- a/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php
+++ b/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php
@@ -15,6 +15,21 @@
         'index.php?normalized_route_test=1&normalized_value=$matches[1]',
         'top'
     );
+    add_rewrite_rule(
+        '^normalized-literal/file\.json$',
+        'index.php?normalized_route_test=1&normalized_value=literal',
+        'top'
+    );
+    add_rewrite_rule(
+        '^normalized-capture-hole/(?:([^/]+)-)?([^/]+)$',
+        'index.php?normalized_route_test=1&normalized_value=$matches[2]',
+        'top'
+    );
+    add_rewrite_rule(
+        '^normalized-named-captures/(?P<first>[^/]+)-(?P<second>[^/]+)/?$',
+        'index.php?normalized_route_test=1&normalized_value=$matches[1]-$matches[2]',
+        'top'
+    );
 });
 
 add_filter('query_vars', static function (array $queryVars): array {

From 4ece1789e7303c16afbad9aa2a38bd9fe13cac36 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 1 Sep 2026 12:07:33 +0200
Subject: [PATCH 42/54] Fix tests

---
 .../Laminas/LaminasIntegration.php            |  3 +-
 .../Laravel/LaravelIntegration.php            |  3 +-
 .../Symfony/SymfonyIntegration.php            |  3 +-
 .../WordPress/WordPressIntegrationLoader.php  | 22 +++---
 src/DDTrace/Util/RouteNormalizer.php          | 69 ++++++++++++++++---
 tracer/configuration.h                        |  1 +
 6 files changed, 78 insertions(+), 23 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index ccff860b72..7e4443efe9 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -282,7 +282,8 @@ static function (SpanData $span) use ($controller, $action) {
                     $httpRoute = LaminasIntegration::httpRouteTemplateFromNamedRouteStack($this, (string) $routeName);
                     if ($httpRoute !== null && $httpRoute !== '') {
                         $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
-                        if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                        if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
+                            && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
                             $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
                             $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
                             // Build a stable cache key that encodes only which optional
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index a71eed6f23..a9c36df3e1 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -141,7 +141,8 @@ static function ($This, $scope, $args, $route) {
                 if (\method_exists($route, 'uri')) {
                     $httpRoute = $route->uri();
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $httpRoute;
-                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
+                        && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
                         $allParams = \method_exists($route, 'parameters') ? ($route->parameters() ?? []) : [];
                         if (strpos($httpRoute, '?}') !== false) {
                             // For routes with optional params, filter out default-injected values
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index 182aa66daa..61d93810bd 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -456,9 +456,8 @@ static function() {
 
                 if ($path !== null) {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
-                    $rawIni = ini_get('datadog.api_security_enabled');
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
-                        && ($rawIni === false || filter_var($rawIni, FILTER_VALIDATE_BOOLEAN) !== false)) {
+                        && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
                         // inferSymfonyRouteParams is lightweight (URL parsing only); compute it
                         // first so the cache key encodes which optional params are present.
                         // Without this, a route with optional params caches only the first
diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index 9cf64cf194..bba0a212a8 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -733,24 +733,24 @@ function_exists('is_404') && is_404() === false) {
                 if (\property_exists($This, 'matched_rule')) {
                     $matchedRule = $This->matched_rule;
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $matchedRule;
-                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()) {
+                    if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
+                        && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
                         $urlPath = \property_exists($This, 'request') ? $This->request : null;
-                        // Key on the count of matched capture groups, not the full URL,
-                        // so all requests with the same optional-capture participation
-                        // share one cache entry rather than one entry per distinct URL.
-                        $wpMatchedGroupCount = null;
+                        // Key on per-capture participation bits, not the full URL or the
+                        // highest-index group, so routes with optional-group holes (e.g.
+                        // (?:([^/]+)-)? absent vs present) get distinct cache entries.
+                        $wpParticipation = null;
                         if ($urlPath !== null) {
                             if (@preg_match('#^' . $matchedRule . '#', ltrim($urlPath, '/'), $_wpc)) {
-                                $wpMatchedGroupCount = 0;
+                                $_bits = [];
                                 for ($_wi = 1; $_wi < count($_wpc); $_wi++) {
-                                    if (isset($_wpc[$_wi]) && $_wpc[$_wi] !== '') {
-                                        $wpMatchedGroupCount = $_wi;
-                                    }
+                                    $_bits[] = (isset($_wpc[$_wi]) && $_wpc[$_wi] !== '') ? '1' : '0';
                                 }
-                                unset($_wpc, $_wi);
+                                $wpParticipation = implode('', $_bits);
+                                unset($_wpc, $_wi, $_bits);
                             }
                         }
-                        $cacheKey = $matchedRule . '#' . ($wpMatchedGroupCount ?? 'n');
+                        $cacheKey = $matchedRule . '#' . ($wpParticipation ?? 'n');
                         $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                         if ($normalizedRoute === false) {
                             $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 449618b00a..17af6e65c6 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -147,9 +147,20 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
             }
 
             if (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
+                // If the segment is entirely escaped static text (e.g. file\.json),
+                // decode the backslash escapes and emit it as a plain static segment.
+                if (self::isStaticEscapedRegex($segment)) {
+                    $decoded = preg_replace('/\\\\(.)/', '$1', $segment);
+                    if ($decoded !== '') {
+                        $normalizedSegments[] = self::encodeStaticSegment($decoded);
+                    }
+                    continue;
+                }
+
                 $prefixLen = strcspn($segment, '([{?*+|^$\\');
                 $dynamicPart = substr($segment, $prefixLen);
-                $groupCount = self::countCaptureGroups($dynamicPart);
+                $groupNames = self::extractCaptureGroupNames($dynamicPart);
+                $groupCount = count($groupNames);
 
                 // Only emit a static prefix for purely-regex segments with no capture
                 // groups. When captures exist the whole segment (prefix + captures) maps
@@ -174,7 +185,9 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
                             $paramIndex++;
                             continue;
                         }
-                        $params[] = 'param' . $paramIndex++;
+                        $name = $groupNames[$j] ?? null;
+                        $params[] = $name !== null ? self::encodeParamName($name) : 'param' . $paramIndex;
+                        $paramIndex++;
                     }
                     if (!empty($params)) {
                         $normalizedSegments[] = '{' . implode('+', $params) . '}';
@@ -234,11 +247,33 @@ private static function splitRegexBySlash(string $str): array
     }
 
     /**
-     * Count capturing groups in a regex segment, ignoring character classes and non-capturing groups.
+     * Returns true if $s is entirely made up of backslash-escaped characters and
+     * plain literal text, with no real regex metacharacters (captures, classes, etc.).
+     */
+    private static function isStaticEscapedRegex(string $s): bool
+    {
+        $len = strlen($s);
+        for ($i = 0; $i < $len; $i++) {
+            if ($s[$i] === '\\') {
+                if ($i + 1 >= $len) {
+                    return false;
+                }
+                $i++;
+            } elseif (strpos('([{?*+|^$', $s[$i]) !== false) {
+                return false;
+            }
+        }
+        return true;
+    }
+
+    /**
+     * Extract capture group names from a regex segment.
+     * Named groups ((?P<name>...) or (?<name>...)) return their name; unnamed groups return null.
+     * Non-capturing groups (?:...) and lookarounds are not included.
      */
-    private static function countCaptureGroups(string $segment): int
+    private static function extractCaptureGroupNames(string $segment): array
     {
-        $count = 0;
+        $names = [];
         $len = strlen($segment);
         $inClass = false;
 
@@ -255,13 +290,31 @@ private static function countCaptureGroups(string $segment): int
             } elseif ($c === ']' && $inClass) {
                 $inClass = false;
             } elseif ($c === '(' && !$inClass) {
-                if ($i + 1 >= $len || $segment[$i + 1] !== '?') {
-                    $count++;
+                if ($i + 1 < $len && $segment[$i + 1] === '?') {
+                    // Named group (?P<name>...) — Python/PCRE syntax
+                    if ($i + 3 < $len && $segment[$i + 2] === 'P' && $segment[$i + 3] === '<') {
+                        $closePos = strpos($segment, '>', $i + 4);
+                        $names[] = $closePos !== false
+                            ? substr($segment, $i + 4, $closePos - ($i + 4))
+                            : null;
+                    // Named group (?<name>...) but not lookbehind (?<=...) / (?<!...)
+                    } elseif (
+                        $i + 2 < $len && $segment[$i + 2] === '<' &&
+                        isset($segment[$i + 3]) && $segment[$i + 3] !== '=' && $segment[$i + 3] !== '!'
+                    ) {
+                        $closePos = strpos($segment, '>', $i + 3);
+                        $names[] = $closePos !== false
+                            ? substr($segment, $i + 3, $closePos - ($i + 3))
+                            : null;
+                    }
+                    // (?:...), (?=...), etc. — not a capturing group, skip
+                } else {
+                    $names[] = null;
                 }
             }
         }
 
-        return $count;
+        return $names;
     }
 
     /**
diff --git a/tracer/configuration.h b/tracer/configuration.h
index 892cdce071..127d3227f5 100644
--- a/tracer/configuration.h
+++ b/tracer/configuration.h
@@ -164,6 +164,7 @@
     CONFIG(BOOL, DD_TRACE_RESOURCE_RENAMING_ALWAYS_SIMPLIFIED_ENDPOINT, "false")                               \
     CONFIG(BOOL, DD_TRACE_STATS_COMPUTATION_ENABLED, "false")                                                  \
     CONFIG(BOOL, DD_EXPERIMENTAL_FLAGGING_PROVIDER_ENABLED, "false")                                           \
+    CONFIG(BOOL, DD_API_SECURITY_ENABLED, "true", .ini_change = zai_config_system_ini_change)                  \
     DD_INTEGRATIONS
 
 #ifndef DDTRACE_CONFIGURATION

From 4e3122a05c4a8bf7da198f321e9da48b3a494090 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 1 Sep 2026 12:49:50 +0200
Subject: [PATCH 43/54] Fix route normalizer: position-aware optional
 detection, lowercase encoding, regex constraints

- expandBracketOptionals: use strpos > 0 (not != false) so optional sections
  whose text coincidentally appears in the mandatory route prefix are not falsely
  detected as present; add case-insensitive fallback for percent-encoded param
  values so %c3%a9 (lowercase hex from browsers) matches %C3%A9 (rawurlencode output)
- normalizeFromLaminas: accept pre-computed $urlMatchedParams to skip
  inferSymfonyRouteParams when the caller has better information
- LaminasIntegration cache key: use '/'+value prefix check at position > 0 so
  params whose default value equals the mandatory route text are not treated as
  present; include static-only optional sections ([/draft]) in the key so absent
  and present shapes get distinct entries; for Regex routes, extract the actual
  route regex via reflection and run it against the URL to get accurate named
  captures, avoiding inferSymfonyRouteParams which ignores Laminas constraints
- SymfonyIntegration: use $route->compile()->getRegex() when available to
  determine URL-matched params instead of generic URL inference, so routes with
  requirements (e.g. format=html|json with a default) correctly exclude defaulted
  params from the normalized route

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../Laminas/LaminasIntegration.php            | 80 ++++++++++++++++---
 .../Symfony/SymfonyIntegration.php            | 36 +++++++--
 src/DDTrace/Util/RouteNormalizer.php          | 27 ++++---
 3 files changed, 115 insertions(+), 28 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 7e4443efe9..f0ec05485f 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -290,39 +290,70 @@ static function (SpanData $span) use ($controller, $action) {
                             // components participated, not the raw URL (which would cause
                             // one cache entry per distinct request value — 500-entry churn).
                             //
-                            // Regex routes (%param% spec): infer which params appear in the
-                            // URL and encode their sorted names as a presence key.
+                            // Regex routes (%param% spec): use the route's actual regex to
+                            // determine which named captures matched the URL.
                             // Bracket routes ([/:param]): collect optional colon-params whose
-                            // values appear in the URL as a presence key.
+                            // values appear in the URL as a presence key; also include
+                            // static-only optional sections.
                             // Fully-required routes: template alone is sufficient.
+                            $urlMatchedFromRegex = null;
                             if ($urlPath !== null && strpos($httpRoute, '%') !== false) {
-                                // Regex route: convert spec to brace form and infer presence
-                                $braceTemp = preg_replace('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', '{$1}', $httpRoute);
-                                $urlMatchedKeys = array_keys(
-                                    \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($braceTemp, $urlPath)
+                                // Regex route: use actual route regex for accurate presence
+                                $_leafRoute = self::getLeafRouteFromNamedRouteStack($this, (string) $routeName);
+                                if ($_leafRoute instanceof \Laminas\Router\Http\Regex) {
+                                    $_rp = new ReflectionProperty($_leafRoute, 'regex');
+                                    $_rp->setAccessible(true);
+                                    $_routeRegex = $_rp->getValue($_leafRoute);
+                                    if ($_routeRegex !== null &&
+                                        @preg_match('(^' . $_routeRegex . '$)', $urlPath, $_rxm) === 1) {
+                                        $urlMatchedFromRegex = [];
+                                        foreach ($_rxm as $_k => $_v) {
+                                            if (!is_string($_k) || $_v === '') {
+                                                continue;
+                                            }
+                                            $urlMatchedFromRegex[$_k] = rawurldecode($_v);
+                                        }
+                                    }
+                                    unset($_rp, $_routeRegex, $_rxm, $_k, $_v);
+                                }
+                                unset($_leafRoute);
+                                $_braceTemp = preg_replace('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', '{$1}', $httpRoute);
+                                $_urlMatchedKeys = array_keys(
+                                    $urlMatchedFromRegex ?? \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($_braceTemp, $urlPath)
                                 );
-                                sort($urlMatchedKeys);
-                                $cacheKey = $httpRoute . '#' . implode(',', $urlMatchedKeys);
+                                sort($_urlMatchedKeys);
+                                $cacheKey = $httpRoute . '#' . implode(',', $_urlMatchedKeys);
+                                unset($_braceTemp, $_urlMatchedKeys);
                             } elseif (strpos($httpRoute, '[') !== false) {
                                 // Bracket-optional route: encode which optional colon-params
-                                // have values that appear in the URL path.
+                                // have values that appear in the URL path (position > 0 to
+                                // avoid matching the mandatory route prefix with a default).
+                                // Also include static-only optional sections ([/draft] etc.)
+                                // so absent/present shapes get distinct cache keys.
                                 preg_match_all('/:([a-zA-Z_][a-zA-Z0-9_-]*)/', $httpRoute, $_pm);
                                 $_present = [];
                                 foreach ($_pm[1] as $_p) {
                                     if (isset($allParams[$_p]) && $urlPath !== null &&
-                                        strpos($urlPath, (string)$allParams[$_p]) !== false) {
+                                        strpos($urlPath, '/' . (string)$allParams[$_p]) > 0) {
                                         $_present[] = $_p;
                                     }
                                 }
+                                preg_match_all('/\[([^\[\]]*)\]/', $httpRoute, $_sm);
+                                foreach ($_sm[1] as $_s) {
+                                    if ($urlPath !== null && !preg_match('/:/', $_s) &&
+                                        strpos($urlPath, $_s) > 0) {
+                                        $_present[] = 'static:' . $_s;
+                                    }
+                                }
                                 sort($_present);
                                 $cacheKey = $httpRoute . '#' . implode(',', $_present);
-                                unset($_pm, $_present, $_p);
+                                unset($_pm, $_sm, $_present, $_p, $_s);
                             } else {
                                 $cacheKey = $httpRoute;
                             }
                             $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                             if ($normalizedRoute === false) {
-                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath);
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath, $urlMatchedFromRegex);
                                 if ($normalizedRoute !== null) {
                                     \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
                                 }
@@ -1204,6 +1235,29 @@ private static function walkRouteStackCollectEndpointRows(
         }
     }
 
+    private static function getLeafRouteFromNamedRouteStack($stack, string $matchedName)
+    {
+        $segments = \explode('/', $matchedName, 2);
+        $route = self::laminasGetNamedRouteFromStack($stack, $segments[0]);
+        if ($route === null) {
+            return null;
+        }
+        $hasChild = isset($segments[1]);
+        if ($route instanceof \Laminas\Router\Http\Part) {
+            if (!$hasChild) {
+                $rp = new ReflectionProperty($route, 'route');
+                $rp->setAccessible(true);
+                return $rp->getValue($route);
+            }
+            self::laminasMaterializePartChildRoutes($route);
+            return self::getLeafRouteFromNamedRouteStack($route, $segments[1]);
+        }
+        if ($hasChild) {
+            return null;
+        }
+        return $route;
+    }
+
     public static function httpRouteTemplateFromNamedRouteStack($stack, string $matchedName): ?string
     {
         $segments = \explode('/', $matchedName, 2);
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index 61d93810bd..ebcf205e9d 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -458,11 +458,37 @@ static function() {
                     $rootSpan->meta[Tag::HTTP_ROUTE] = $path;
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
                         && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
-                        // inferSymfonyRouteParams is lightweight (URL parsing only); compute it
-                        // first so the cache key encodes which optional params are present.
-                        // Without this, a route with optional params caches only the first
-                        // materialization and serves it for all subsequent URL patterns.
-                        $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
+                        // Use the compiled route regex for accurate param presence detection.
+                        // Generic URL inference (inferSymfonyRouteParams) ignores route
+                        // requirements and can misidentify defaulted params as URL-matched
+                        // (e.g. {slug}.{format} with format=html|json requirement and URL
+                        // "foo.bar" — generic inference treats "bar" as format).
+                        // Fall back to generic inference when the route is unavailable.
+                        $matchedParams = null;
+                        if ($container->has('router')) {
+                            $_r = $container->get('router');
+                            if (method_exists($_r, 'getRouteCollection')) {
+                                $_route = $_r->getRouteCollection()->get($route_name);
+                                if ($_route !== null && method_exists($_route, 'compile')) {
+                                    $_compiled = $_route->compile();
+                                    if (method_exists($_compiled, 'getRegex')) {
+                                        $_regex = $_compiled->getRegex();
+                                        if (@preg_match($_regex, $request->getPathInfo(), $_rxm) === 1) {
+                                            $matchedParams = [];
+                                            foreach ($_rxm as $_k => $_v) {
+                                                if (is_string($_k) && $_v !== '') {
+                                                    $matchedParams[$_k] = $_v;
+                                                }
+                                            }
+                                        }
+                                    }
+                                }
+                            }
+                            unset($_r, $_route, $_compiled, $_regex, $_rxm, $_k, $_v);
+                        }
+                        if ($matchedParams === null) {
+                            $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
+                        }
                         $cacheKey = $route_name . '|' . implode(',', array_keys($matchedParams));
                         $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
                         if ($normalizedRoute === false) {
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 17af6e65c6..989b937e5c 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -57,7 +57,7 @@ static function ($m) use ($matchedParams) {
      *                                   VersionListener sets :version even without a /v1/ prefix)
      * @return string|null
      */
-    public static function normalizeFromLaminas(string $template, array $matchedParams = [], $urlPath = null)
+    public static function normalizeFromLaminas(string $template, array $matchedParams = [], $urlPath = null, $urlMatchedParams = null)
     {
         $expanded = self::expandBracketOptionals($template, $matchedParams, ':', $urlPath);
 
@@ -77,15 +77,15 @@ public static function normalizeFromLaminas(string $template, array $matchedPara
         // optional captures absent from the URL (e.g. format='html' when no .html in path).
         // Use the URL path to determine which params were actually URL-matched.
         if ($hasPercentParams && $urlPath !== null) {
-            $urlMatchedParams = self::inferSymfonyRouteParams($braceFormat, $urlPath);
+            $effectiveUrlMatchedParams = $urlMatchedParams ?? self::inferSymfonyRouteParams($braceFormat, $urlPath);
             $braceFormat = preg_replace_callback(
                 '/\{([^}?:]+)\}/',
-                static function ($m) use ($urlMatchedParams) {
-                    return array_key_exists($m[1], $urlMatchedParams) ? $m[0] : '{' . $m[1] . '?}';
+                static function ($m) use ($effectiveUrlMatchedParams) {
+                    return array_key_exists($m[1], $effectiveUrlMatchedParams) ? $m[0] : '{' . $m[1] . '?}';
                 },
                 $braceFormat
             );
-            return self::normalizeBraceRoute($braceFormat, $urlMatchedParams);
+            return self::normalizeBraceRoute($braceFormat, $effectiveUrlMatchedParams);
         }
 
         return self::normalizeBraceRoute($braceFormat, $matchedParams);
@@ -447,9 +447,11 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
 
                     if (empty($innerParams)) {
                         // Static-only optional section (e.g. [/draft]):
-                        // only expand when the literal text appears in the URL.
+                        // only expand when the literal text appears in the URL
+                        // at a position > 0 (never at the very start, since optional
+                        // sections always follow mandatory route text).
                         if ($urlPath !== null) {
-                            return (strpos($urlPath, $inner) !== false) ? $inner : '';
+                            return (strpos($urlPath, $inner) > 0) ? $inner : '';
                         }
                         return $inner;
                     }
@@ -466,6 +468,9 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                         // multi-param sections like [/:year/:month] are found correctly.
                         // Use a word-boundary-aware replacement so :id is not replaced
                         // inside :id2 (str_replace(':id', ...) would corrupt ':id2').
+                        // Check position > 0: optional sections always follow mandatory
+                        // route text so a match at position 0 is a false positive (e.g.
+                        // the default value is identical to the mandatory route prefix).
                         $innerWithValues = $inner;
                         foreach ($innerParams as $param) {
                             $value = (string)$matchedParams[$param];
@@ -475,10 +480,11 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                                 $innerWithValues
                             );
                         }
-                        if (strpos($urlPath, $innerWithValues) !== false) {
+                        if (strpos($urlPath, $innerWithValues) > 0) {
                             return $inner;
                         }
-                        // Try percent-encoded values (Laminas URL-decodes param values)
+                        // Try percent-encoded values (Laminas URL-decodes param values).
+                        // Also try lowercase hex since browsers may send %c3%a9 for %C3%A9.
                         $innerEncoded = $inner;
                         foreach ($innerParams as $param) {
                             $value = rawurlencode((string)$matchedParams[$param]);
@@ -488,7 +494,8 @@ function ($m) use ($matchedParams, $paramPrefix, $urlPath) {
                                 $innerEncoded
                             );
                         }
-                        if (strpos($urlPath, $innerEncoded) !== false) {
+                        if (strpos($urlPath, $innerEncoded) > 0 ||
+                            strpos(strtolower($urlPath), strtolower($innerEncoded)) > 0) {
                             return $inner;
                         }
                         return '';

From ddb918e257768435e5f75c0331b20a263850c0ac Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 1 Sep 2026 14:02:53 +0200
Subject: [PATCH 44/54] Fix tests

---
 .../Laminas/LaminasIntegration.php            | 39 ++++++++++++-------
 .../Laravel/LaravelIntegration.php            | 24 ++++++++++--
 2 files changed, 44 insertions(+), 19 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index f0ec05485f..2c76a5fe8a 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -298,25 +298,34 @@ static function (SpanData $span) use ($controller, $action) {
                             // Fully-required routes: template alone is sufficient.
                             $urlMatchedFromRegex = null;
                             if ($urlPath !== null && strpos($httpRoute, '%') !== false) {
-                                // Regex route: use actual route regex for accurate presence
-                                $_leafRoute = self::getLeafRouteFromNamedRouteStack($this, (string) $routeName);
-                                if ($_leafRoute instanceof \Laminas\Router\Http\Regex) {
-                                    $_rp = new ReflectionProperty($_leafRoute, 'regex');
-                                    $_rp->setAccessible(true);
-                                    $_routeRegex = $_rp->getValue($_leafRoute);
-                                    if ($_routeRegex !== null &&
-                                        @preg_match('(^' . $_routeRegex . '$)', $urlPath, $_rxm) === 1) {
-                                        $urlMatchedFromRegex = [];
-                                        foreach ($_rxm as $_k => $_v) {
-                                            if (!is_string($_k) || $_v === '') {
-                                                continue;
+                                // Regex route: use actual route regex for accurate presence.
+                                // Protected property access via Closure::bind (avoids
+                                // ReflectionProperty issues inside DDTrace sandbox).
+                                try {
+                                    $_leafRoute = self::getLeafRouteFromNamedRouteStack($this, (string) $routeName);
+                                    if ($_leafRoute instanceof \Laminas\Router\Http\Regex) {
+                                        $_routeRegex = \Closure::bind(
+                                            static function ($r) { return $r->regex; },
+                                            null,
+                                            \Laminas\Router\Http\Regex::class
+                                        )($_leafRoute);
+                                        if ($_routeRegex !== null &&
+                                            @preg_match('(^' . $_routeRegex . '$)', $urlPath, $_rxm) === 1) {
+                                            $urlMatchedFromRegex = [];
+                                            foreach ($_rxm as $_k => $_v) {
+                                                if (!is_string($_k) || $_v === '') {
+                                                    continue;
+                                                }
+                                                $urlMatchedFromRegex[$_k] = rawurldecode($_v);
                                             }
-                                            $urlMatchedFromRegex[$_k] = rawurldecode($_v);
                                         }
+                                        unset($_routeRegex, $_rxm, $_k, $_v);
                                     }
-                                    unset($_rp, $_routeRegex, $_rxm, $_k, $_v);
+                                    unset($_leafRoute);
+                                } catch (\Throwable $_ex) {
+                                    unset($_leafRoute, $_routeRegex, $_rxm, $_k, $_v, $_ex);
+                                    $urlMatchedFromRegex = null;
                                 }
-                                unset($_leafRoute);
                                 $_braceTemp = preg_replace('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', '{$1}', $httpRoute);
                                 $_urlMatchedKeys = array_keys(
                                     $urlMatchedFromRegex ?? \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($_braceTemp, $urlPath)
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index a9c36df3e1..b4a1ce068d 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -840,15 +840,31 @@ private static function laravelUrlMatchedParams(string $routeUri, string $urlPat
                         if ($k === $n) {
                             $regexBody .= preg_quote($staticParts[$n], '/');
                         }
-                        if (@preg_match('/^' . $regexBody . '$/', $urlSeg)) {
+                        if (@preg_match('/^' . $regexBody . '$/', $urlSeg, $_caps)) {
+                            // For optional params, verify the captured value matches
+                            // allParams. If it doesn't, the param is using a route
+                            // default injected by ->defaults() and was absent from the URL.
+                            $_valid = true;
                             for ($ri = 0; $ri < $k; $ri++) {
-                                if (array_key_exists($paramNames[$ri], $allParams)) {
-                                    $matched[$paramNames[$ri]] = $allParams[$paramNames[$ri]];
+                                $_isOpt = !empty($pm[$ri][2]);
+                                if ($_isOpt && array_key_exists($paramNames[$ri], $allParams) &&
+                                    isset($_caps[$ri + 1]) &&
+                                    (string)$allParams[$paramNames[$ri]] !== (string)$_caps[$ri + 1]) {
+                                    $_valid = false;
+                                    break;
                                 }
                             }
-                            break;
+                            if ($_valid) {
+                                for ($ri = 0; $ri < $k; $ri++) {
+                                    if (array_key_exists($paramNames[$ri], $allParams)) {
+                                        $matched[$paramNames[$ri]] = $allParams[$paramNames[$ri]];
+                                    }
+                                }
+                                break;
+                            }
                         }
                     }
+                    unset($_caps, $_valid, $_isOpt);
                 }
                 $urlIdx++;
             } else {

From f84cce4404e37cb394cac7a6086df51cf11cf8af Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 1 Sep 2026 15:06:04 +0200
Subject: [PATCH 45/54] Fix laminas

---
 src/DDTrace/Integrations/Laminas/LaminasIntegration.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 2c76a5fe8a..1be39a2006 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -302,7 +302,7 @@ static function (SpanData $span) use ($controller, $action) {
                                 // Protected property access via Closure::bind (avoids
                                 // ReflectionProperty issues inside DDTrace sandbox).
                                 try {
-                                    $_leafRoute = self::getLeafRouteFromNamedRouteStack($this, (string) $routeName);
+                                    $_leafRoute = LaminasIntegration::getLeafRouteFromNamedRouteStack($this, (string) $routeName);
                                     if ($_leafRoute instanceof \Laminas\Router\Http\Regex) {
                                         $_routeRegex = \Closure::bind(
                                             static function ($r) { return $r->regex; },
@@ -1244,7 +1244,7 @@ private static function walkRouteStackCollectEndpointRows(
         }
     }
 
-    private static function getLeafRouteFromNamedRouteStack($stack, string $matchedName)
+    public static function getLeafRouteFromNamedRouteStack($stack, string $matchedName)
     {
         $segments = \explode('/', $matchedName, 2);
         $route = self::laminasGetNamedRouteFromStack($stack, $segments[0]);

From 37fb0b4c7845379c2b2918ef57b91ea2c1ebd6ba Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 1 Sep 2026 18:54:57 +0200
Subject: [PATCH 46/54] Amend Wordpress

---
 .../Integrations/WordPress/WordPressIntegrationLoader.php   | 2 +-
 src/DDTrace/Util/RouteNormalizer.php                        | 6 +++++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index bba0a212a8..27a5cea759 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -741,7 +741,7 @@ function_exists('is_404') && is_404() === false) {
                         // (?:([^/]+)-)? absent vs present) get distinct cache entries.
                         $wpParticipation = null;
                         if ($urlPath !== null) {
-                            if (@preg_match('#^' . $matchedRule . '#', ltrim($urlPath, '/'), $_wpc)) {
+                            if (@preg_match('#^' . $matchedRule . '#', trim($urlPath, '/'), $_wpc)) {
                                 $_bits = [];
                                 for ($_wi = 1; $_wi < count($_wpc); $_wi++) {
                                     $_bits[] = (isset($_wpc[$_wi]) && $_wpc[$_wi] !== '') ? '1' : '0';
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 989b937e5c..d7ccf6c194 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -110,7 +110,11 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
         // that didn't participate are skipped instead of emitting phantom params.
         $matchedGroups = null;
         if ($urlPath !== null) {
-            if (@preg_match('#^' . $matchedRule . '#', ltrim($urlPath, '/'), $captures)) {
+            // Strip both leading and trailing slashes: WordPress $wp->request often includes
+            // a trailing slash, but many WordPress regex rules end with `$` (no `/?`), so a
+            // trailing slash causes the match to fail and leaves $matchedGroups null — which
+            // then treats all optional capture groups as present and produces the wrong shape.
+            if (@preg_match('#^' . $matchedRule . '#', trim($urlPath, '/'), $captures)) {
                 $matchedGroups = [];
                 for ($i = 1; $i < count($captures); $i++) {
                     if (isset($captures[$i]) && $captures[$i] !== '') {

From 4785c913ff91d0db97466c1f1ea498d1eaffcd38 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 8 Sep 2026 18:22:21 +0200
Subject: [PATCH 47/54] Address comments

---
 .../Laminas/LaminasIntegration.php            | 338 ++++++--
 .../Laravel/LaravelIntegration.php            | 101 +--
 .../Symfony/SymfonyIntegration.php            |  15 +-
 .../WordPress/WordPressIntegrationLoader.php  |  38 +-
 src/DDTrace/Util/RouteNormalizer.php          | 749 +++++++++++-------
 .../Util/Normalizer/RouteNormalizerTest.php   |  43 -
 6 files changed, 801 insertions(+), 483 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 1be39a2006..156e8d18c0 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -286,89 +286,86 @@ static function (SpanData $span) use ($controller, $action) {
                             && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
                             $allParams = method_exists($routeMatch, 'getParams') ? ($routeMatch->getParams() ?? []) : [];
                             $urlPath = method_exists($request, 'getUri') ? $request->getUri()->getPath() : null;
-                            // Build a stable cache key that encodes only which optional
-                            // components participated, not the raw URL (which would cause
-                            // one cache entry per distinct request value — 500-entry churn).
-                            //
-                            // Regex routes (%param% spec): use the route's actual regex to
-                            // determine which named captures matched the URL.
-                            // Bracket routes ([/:param]): collect optional colon-params whose
-                            // values appear in the URL as a presence key; also include
-                            // static-only optional sections.
-                            // Fully-required routes: template alone is sufficient.
+                            // Regex and bracket routes require the framework's compiled
+                            // matcher data. If it cannot be obtained, leave cacheKey null
+                            // and omit the normalized tag rather than infer from the URL.
                             $urlMatchedFromRegex = null;
-                            if ($urlPath !== null && strpos($httpRoute, '%') !== false) {
+                            $matchedSegmentTemplate = null;
+                            $urlMatchedFromSegment = null;
+                            $cacheKey = null;
+                            if (strpos($httpRoute, '%') !== false) {
                                 // Regex route: use actual route regex for accurate presence.
-                                // Protected property access via Closure::bind (avoids
-                                // ReflectionProperty issues inside DDTrace sandbox).
-                                try {
-                                    $_leafRoute = LaminasIntegration::getLeafRouteFromNamedRouteStack($this, (string) $routeName);
-                                    if ($_leafRoute instanceof \Laminas\Router\Http\Regex) {
-                                        $_routeRegex = \Closure::bind(
-                                            static function ($r) { return $r->regex; },
-                                            null,
-                                            \Laminas\Router\Http\Regex::class
-                                        )($_leafRoute);
-                                        if ($_routeRegex !== null &&
-                                            @preg_match('(^' . $_routeRegex . '$)', $urlPath, $_rxm) === 1) {
-                                            $urlMatchedFromRegex = [];
-                                            foreach ($_rxm as $_k => $_v) {
-                                                if (!is_string($_k) || $_v === '') {
-                                                    continue;
-                                                }
-                                                $urlMatchedFromRegex[$_k] = rawurldecode($_v);
-                                            }
-                                        }
-                                        unset($_routeRegex, $_rxm, $_k, $_v);
+                                if ($urlPath !== null) {
+                                    try {
+                                        $_leafRoute = LaminasIntegration::getLeafRouteFromNamedRouteStack(
+                                            $this,
+                                            (string) $routeName
+                                        );
+                                        $urlMatchedFromRegex = LaminasIntegration::inferLaminasRegexMatch(
+                                            $_leafRoute,
+                                            $urlPath
+                                        );
+                                        unset($_leafRoute);
+                                    } catch (\Throwable $_ex) {
+                                        unset($_leafRoute, $_ex);
+                                        $urlMatchedFromRegex = null;
                                     }
-                                    unset($_leafRoute);
-                                } catch (\Throwable $_ex) {
-                                    unset($_leafRoute, $_routeRegex, $_rxm, $_k, $_v, $_ex);
-                                    $urlMatchedFromRegex = null;
                                 }
-                                $_braceTemp = preg_replace('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', '{$1}', $httpRoute);
-                                $_urlMatchedKeys = array_keys(
-                                    $urlMatchedFromRegex ?? \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($_braceTemp, $urlPath)
-                                );
-                                sort($_urlMatchedKeys);
-                                $cacheKey = $httpRoute . '#' . implode(',', $_urlMatchedKeys);
-                                unset($_braceTemp, $_urlMatchedKeys);
+                                if ($urlMatchedFromRegex !== null) {
+                                    $_urlMatchedKeys = array_keys($urlMatchedFromRegex);
+                                    sort($_urlMatchedKeys);
+                                    $cacheKey = $httpRoute . '#' . implode(',', $_urlMatchedKeys);
+                                    unset($_urlMatchedKeys);
+                                }
                             } elseif (strpos($httpRoute, '[') !== false) {
-                                // Bracket-optional route: encode which optional colon-params
-                                // have values that appear in the URL path (position > 0 to
-                                // avoid matching the mandatory route prefix with a default).
-                                // Also include static-only optional sections ([/draft] etc.)
-                                // so absent/present shapes get distinct cache keys.
-                                preg_match_all('/:([a-zA-Z_][a-zA-Z0-9_-]*)/', $httpRoute, $_pm);
-                                $_present = [];
-                                foreach ($_pm[1] as $_p) {
-                                    if (isset($allParams[$_p]) && $urlPath !== null &&
-                                        strpos($urlPath, '/' . (string)$allParams[$_p]) > 0) {
-                                        $_present[] = $_p;
+                                // Bracket-optional route: use Segment::match() to get
+                                // accurate capture participation without URL inference.
+                                try {
+                                    $_leafRoute = LaminasIntegration::getLeafRouteFromNamedRouteStack(
+                                        $this,
+                                        (string) $routeName
+                                    );
+                                    if ($_leafRoute instanceof \Laminas\Router\Http\Segment) {
+                                        $_segmentMatch = LaminasIntegration::inferLaminasSegmentMatch(
+                                            $_leafRoute,
+                                            $urlPath
+                                        );
+                                        if ($_segmentMatch !== null) {
+                                            $matchedSegmentTemplate = $_segmentMatch['template'];
+                                            $urlMatchedFromSegment = $_segmentMatch['params'];
+                                        }
                                     }
+                                    unset($_leafRoute, $_segmentMatch);
+                                } catch (\Throwable $_ex) {
+                                    unset($_leafRoute, $_segmentMatch, $_ex);
                                 }
-                                preg_match_all('/\[([^\[\]]*)\]/', $httpRoute, $_sm);
-                                foreach ($_sm[1] as $_s) {
-                                    if ($urlPath !== null && !preg_match('/:/', $_s) &&
-                                        strpos($urlPath, $_s) > 0) {
-                                        $_present[] = 'static:' . $_s;
-                                    }
+
+                                if ($matchedSegmentTemplate !== null) {
+                                    $cacheKey = $httpRoute . '#' . $matchedSegmentTemplate;
                                 }
-                                sort($_present);
-                                $cacheKey = $httpRoute . '#' . implode(',', $_present);
-                                unset($_pm, $_sm, $_present, $_p, $_s);
                             } else {
                                 $cacheKey = $httpRoute;
                             }
-                            $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
-                            if ($normalizedRoute === false) {
-                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas($httpRoute, $allParams, $urlPath, $urlMatchedFromRegex);
-                                if ($normalizedRoute !== null) {
-                                    \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                            if ($cacheKey !== null) {
+                                $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+                                if ($normalizedRoute === false) {
+                                    $normalizationTemplate = $matchedSegmentTemplate ?? $httpRoute;
+                                    $normalizationParams = $urlMatchedFromSegment ?? $allParams;
+                                    $normalizationUrlPath = $matchedSegmentTemplate === null ? $urlPath : null;
+                                    $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromLaminas(
+                                        $normalizationTemplate,
+                                        $normalizationParams,
+                                        $normalizationUrlPath,
+                                        $urlMatchedFromRegex
+                                    );
+                                    if ($normalizedRoute !== null) {
+                                        \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                                    }
+                                    unset($normalizationTemplate, $normalizationParams, $normalizationUrlPath);
+                                }
+                                if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                                    $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                                 }
-                            }
-                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
                         }
                     }
@@ -1244,6 +1241,205 @@ private static function walkRouteStackCollectEndpointRows(
         }
     }
 
+    /**
+     * Reproduce Regex::match() before Laminas merges route defaults.
+     */
+    public static function inferLaminasRegexMatch($route, string $urlPath)
+    {
+        if ($route instanceof \Laminas\Router\Http\Regex) {
+            $match = self::matchLaminasRegexComponent($route, $urlPath, null);
+            return $match === null ? null : $match['params'];
+        }
+
+        if (!($route instanceof \Laminas\Router\Http\Chain)) {
+            return null;
+        }
+
+        $offset = 0;
+        $params = [];
+        foreach (self::laminasGetChainRoutes($route) as $component) {
+            if ($component instanceof \Laminas\Router\Http\Regex) {
+                $match = self::matchLaminasRegexComponent($component, $urlPath, $offset);
+            } elseif ($component instanceof \Laminas\Router\Http\Literal) {
+                $match = self::matchLaminasLiteralComponent($component, $urlPath, $offset);
+            } else {
+                return null;
+            }
+            if ($match === null) {
+                return null;
+            }
+            $params = array_merge($params, $match['params']);
+            $offset += $match['length'];
+        }
+
+        return $offset === strlen($urlPath) ? $params : null;
+    }
+
+    private static function matchLaminasRegexComponent($route, string $urlPath, $offset)
+    {
+        $regex = \Closure::bind(
+            static function ($regexRoute) { return $regexRoute->regex; },
+            null,
+            \Laminas\Router\Http\Regex::class
+        )($route);
+        $pattern = $offset === null ? '(^' . $regex . '$)' : '(\G' . $regex . ')';
+        $matches = [];
+        if (@preg_match($pattern, $urlPath, $matches, 0, $offset ?? 0) !== 1) {
+            return null;
+        }
+
+        $params = [];
+        foreach ($matches as $name => $value) {
+            if (is_string($name) && $value !== '') {
+                $params[$name] = rawurldecode($value);
+            }
+        }
+
+        return ['params' => $params, 'length' => strlen($matches[0])];
+    }
+
+    private static function matchLaminasLiteralComponent($route, string $urlPath, int $offset)
+    {
+        $literal = \Closure::bind(
+            static function ($literalRoute) { return $literalRoute->route; },
+            null,
+            \Laminas\Router\Http\Literal::class
+        )($route);
+        if ($literal === '' || strpos($urlPath, $literal, $offset) !== $offset) {
+            return null;
+        }
+
+        return ['params' => [], 'length' => strlen($literal)];
+    }
+
+    /**
+     * Reproduce Segment::match() before Laminas merges route defaults.
+     *
+     * @return array{template: string, params: array}|null
+     */
+    public static function inferLaminasSegmentMatch(
+        \Laminas\Router\Http\Segment $route,
+        string $urlPath
+    ) {
+        $routeData = \Closure::bind(
+            static function ($segment) {
+                return [
+                    $segment->regex,
+                    $segment->paramMap,
+                    $segment->parts,
+                    $segment->translationKeys,
+                ];
+            },
+            null,
+            \Laminas\Router\Http\Segment::class
+        )($route);
+
+        if (!is_array($routeData) || count($routeData) !== 4 || !empty($routeData[3])) {
+            return null;
+        }
+
+        $matches = [];
+        if (@preg_match('(^' . $routeData[0] . '$)', $urlPath, $matches, PREG_OFFSET_CAPTURE) !== 1) {
+            return null;
+        }
+
+        $captures = [];
+        $params = [];
+        foreach ($routeData[1] as $group => $name) {
+            if (!isset($matches[$group][0]) || $matches[$group][0] === '') {
+                continue;
+            }
+            $captures[$name][] = [
+                'raw' => $matches[$group][0],
+                'offset' => $matches[$group][1],
+            ];
+            $params[$name] = rawurldecode($matches[$group][0]);
+        }
+
+        $states = [[
+            'offset' => 0,
+            'template' => '',
+            'capture_indexes' => [],
+        ]];
+        $states = self::matchLaminasSegmentParts($routeData[2], $urlPath, $captures, $states);
+        foreach ($states as $state) {
+            if ($state['offset'] !== strlen($urlPath)) {
+                continue;
+            }
+            foreach ($captures as $name => $values) {
+                if (($state['capture_indexes'][$name] ?? 0) !== count($values)) {
+                    continue 2;
+                }
+            }
+            return [
+                'template' => $state['template'],
+                'params' => $params,
+            ];
+        }
+
+        return null;
+    }
+
+    private static function matchLaminasSegmentParts(
+        array $parts,
+        string $urlPath,
+        array $captures,
+        array $states
+    ): array {
+        foreach ($parts as $part) {
+            $nextStates = [];
+            foreach ($states as $state) {
+                if ($part[0] === 'literal') {
+                    $literal = $part[1];
+                    if (substr($urlPath, $state['offset'], strlen($literal)) !== $literal) {
+                        continue;
+                    }
+                    $state['offset'] += strlen($literal);
+                    $state['template'] .= $literal;
+                    $nextStates[] = $state;
+                } elseif ($part[0] === 'parameter') {
+                    $name = $part[1];
+                    $captureIndex = $state['capture_indexes'][$name] ?? 0;
+                    if (!isset($captures[$name][$captureIndex])) {
+                        continue;
+                    }
+                    $capture = $captures[$name][$captureIndex];
+                    if ($capture['offset'] !== $state['offset']) {
+                        continue;
+                    }
+                    $state['offset'] += strlen($capture['raw']);
+                    $state['template'] .= ':' . $name;
+                    if (isset($part[2]) && $part[2] !== null && $part[2] !== '') {
+                        $state['template'] .= '{' . $part[2] . '}';
+                    }
+                    $state['capture_indexes'][$name] = $captureIndex + 1;
+                    $nextStates[] = $state;
+                } elseif ($part[0] === 'optional') {
+                    $optionalStates = self::matchLaminasSegmentParts(
+                        $part[1],
+                        $urlPath,
+                        $captures,
+                        [$state]
+                    );
+                    foreach ($optionalStates as $optionalState) {
+                        $nextStates[] = $optionalState;
+                    }
+                    $nextStates[] = $state;
+                } else {
+                    // Translated literals require the router's match options. Fall back
+                    // rather than attempting a potentially inaccurate reconstruction.
+                    return [];
+                }
+            }
+            $states = $nextStates;
+            if (empty($states)) {
+                break;
+            }
+        }
+
+        return $states;
+    }
+
     public static function getLeafRouteFromNamedRouteStack($stack, string $matchedName)
     {
         $segments = \explode('/', $matchedName, 2);
diff --git a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
index b4a1ce068d..7de01a9520 100644
--- a/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
+++ b/src/DDTrace/Integrations/Laravel/LaravelIntegration.php
@@ -147,9 +147,7 @@ static function ($This, $scope, $args, $route) {
                         if (strpos($httpRoute, '?}') !== false) {
                             // For routes with optional params, filter out default-injected values
                             // (e.g. ->defaults('format', 'html')) that weren't present in the URL.
-                            $matchedParams = self::laravelUrlMatchedParams(
-                                $httpRoute, $request->path(), $allParams
-                            );
+                            $matchedParams = self::laravelUrlMatchedParams($route, $request, $allParams);
                             // Cache key encodes which optional params are present
                             preg_match_all('/\{([^}]+)\?\}/', $httpRoute, $_opts);
                             $_present = [];
@@ -792,83 +790,36 @@ public static function normalizeRouteName($routeName)
      * Determine which Laravel optional params were actually present in the URL path
      * (vs. injected as route defaults via ->defaults()).
      *
-     * Walks the route URI template and URL path in parallel; an optional param is only
-     * included in the result when the URL has a non-empty segment at that position.
+     * Laravel applies defaults before exposing Route::parameters(), so use the same
+     * compiled regex that Laravel used to bind the request to identify URL captures.
      *
-     * @param string $routeUri  From $route->uri(), e.g. "normalized-default/{format?}"
-     * @param string $urlPath   From $request->path(), e.g. "normalized-default"
+     * @param object $route     Matched Laravel route
+     * @param object $request   Laravel request
      * @param array  $allParams From $route->parameters()
      * @return array
      */
-    private static function laravelUrlMatchedParams(string $routeUri, string $urlPath, array $allParams): array
+    private static function laravelUrlMatchedParams($route, $request, array $allParams): array
     {
-        $routeSegs = explode('/', trim($routeUri, '/'));
-        $urlSegs   = explode('/', trim($urlPath, '/'));
-        $matched   = [];
-        $urlIdx    = 0;
-
-        foreach ($routeSegs as $seg) {
-            if (preg_match('/^\{([^}?:]+)\?\}$/', $seg, $m)) {
-                // Whole-segment optional param
-                if ($urlIdx < count($urlSegs) && $urlSegs[$urlIdx] !== '') {
-                    if (array_key_exists($m[1], $allParams)) {
-                        $matched[$m[1]] = $allParams[$m[1]];
-                    }
-                    $urlIdx++;
-                }
-            } elseif (preg_match('/^\{([^}?:]+)\}$/', $seg, $m)) {
-                // Whole-segment required param — always present
-                if (array_key_exists($m[1], $allParams)) {
-                    $matched[$m[1]] = $allParams[$m[1]];
-                }
-                $urlIdx++;
-            } elseif (strpos($seg, '{') !== false) {
-                // Mixed segment (e.g. "{name}.{ext?}"): use progressive regex matching
-                // to determine which params (including optional ones) appear in the URL.
-                if ($urlIdx < count($urlSegs) && $urlSegs[$urlIdx] !== '') {
-                    preg_match_all('/\{([^}?:]+)(\?)?\}/', $seg, $pm, PREG_SET_ORDER);
-                    $paramNames  = array_map(static function($m) { return $m[1]; }, $pm);
-                    $staticParts = preg_split('/\{[^}]+\}/', $seg);
-                    $n           = count($paramNames);
-                    $urlSeg      = $urlSegs[$urlIdx];
-
-                    for ($k = $n; $k >= 1; $k--) {
-                        $regexBody = '';
-                        for ($ri = 0; $ri < $k; $ri++) {
-                            $regexBody .= preg_quote($staticParts[$ri], '/') . '(.+)';
-                        }
-                        if ($k === $n) {
-                            $regexBody .= preg_quote($staticParts[$n], '/');
-                        }
-                        if (@preg_match('/^' . $regexBody . '$/', $urlSeg, $_caps)) {
-                            // For optional params, verify the captured value matches
-                            // allParams. If it doesn't, the param is using a route
-                            // default injected by ->defaults() and was absent from the URL.
-                            $_valid = true;
-                            for ($ri = 0; $ri < $k; $ri++) {
-                                $_isOpt = !empty($pm[$ri][2]);
-                                if ($_isOpt && array_key_exists($paramNames[$ri], $allParams) &&
-                                    isset($_caps[$ri + 1]) &&
-                                    (string)$allParams[$paramNames[$ri]] !== (string)$_caps[$ri + 1]) {
-                                    $_valid = false;
-                                    break;
-                                }
-                            }
-                            if ($_valid) {
-                                for ($ri = 0; $ri < $k; $ri++) {
-                                    if (array_key_exists($paramNames[$ri], $allParams)) {
-                                        $matched[$paramNames[$ri]] = $allParams[$paramNames[$ri]];
-                                    }
-                                }
-                                break;
-                            }
-                        }
-                    }
-                    unset($_caps, $_valid, $_isOpt);
-                }
-                $urlIdx++;
-            } else {
-                $urlIdx++;
+        if (!method_exists($route, 'getCompiled') || !method_exists($route, 'parameterNames')) {
+            return $allParams;
+        }
+
+        $compiled = $route->getCompiled();
+        if ($compiled === null || !method_exists($compiled, 'getRegex')) {
+            return $allParams;
+        }
+
+        $path = method_exists($request, 'decodedPath') ? $request->decodedPath() : $request->path();
+        $matches = [];
+        if (@preg_match($compiled->getRegex(), '/' . ltrim($path, '/'), $matches) !== 1) {
+            return $allParams;
+        }
+
+        $matched = [];
+        foreach ($route->parameterNames() as $name) {
+            if (isset($matches[$name]) && is_string($matches[$name])
+                && strlen($matches[$name]) > 0 && array_key_exists($name, $allParams)) {
+                $matched[$name] = $allParams[$name];
             }
         }
 
diff --git a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
index ebcf205e9d..50ca0987b6 100644
--- a/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
+++ b/src/DDTrace/Integrations/Symfony/SymfonyIntegration.php
@@ -459,11 +459,8 @@ static function() {
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
                         && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
                         // Use the compiled route regex for accurate param presence detection.
-                        // Generic URL inference (inferSymfonyRouteParams) ignores route
-                        // requirements and can misidentify defaulted params as URL-matched
-                        // (e.g. {slug}.{format} with format=html|json requirement and URL
-                        // "foo.bar" — generic inference treats "bar" as format).
-                        // Fall back to generic inference when the route is unavailable.
+                        // Without it, omit the tag instead of inferring from the URL and
+                        // potentially treating a route default as a matched parameter.
                         $matchedParams = null;
                         if ($container->has('router')) {
                             $_r = $container->get('router');
@@ -473,7 +470,9 @@ static function() {
                                     $_compiled = $_route->compile();
                                     if (method_exists($_compiled, 'getRegex')) {
                                         $_regex = $_compiled->getRegex();
-                                        if (@preg_match($_regex, $request->getPathInfo(), $_rxm) === 1) {
+                                        // Symfony's UrlMatcher matches the decoded path.
+                                        $_pathInfo = rawurldecode($request->getPathInfo());
+                                        if (@preg_match($_regex, $_pathInfo, $_rxm) === 1) {
                                             $matchedParams = [];
                                             foreach ($_rxm as $_k => $_v) {
                                                 if (is_string($_k) && $_v !== '') {
@@ -484,10 +483,10 @@ static function() {
                                     }
                                 }
                             }
-                            unset($_r, $_route, $_compiled, $_regex, $_rxm, $_k, $_v);
+                            unset($_r, $_route, $_compiled, $_regex, $_pathInfo, $_rxm, $_k, $_v);
                         }
                         if ($matchedParams === null) {
-                            $matchedParams = \DDTrace\Util\RouteNormalizer::inferSymfonyRouteParams($path, $request->getPathInfo());
+                            return;
                         }
                         $cacheKey = $route_name . '|' . implode(',', array_keys($matchedParams));
                         $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
diff --git a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
index 27a5cea759..43461aef0d 100644
--- a/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
+++ b/src/DDTrace/Integrations/WordPress/WordPressIntegrationLoader.php
@@ -736,31 +736,27 @@ function_exists('is_404') && is_404() === false) {
                     if (function_exists('\datadog\appsec\is_enabled') && \datadog\appsec\is_enabled()
                         && dd_trace_env_config("DD_API_SECURITY_ENABLED")) {
                         $urlPath = \property_exists($This, 'request') ? $This->request : null;
-                        // Key on per-capture participation bits, not the full URL or the
-                        // highest-index group, so routes with optional-group holes (e.g.
-                        // (?:([^/]+)-)? absent vs present) get distinct cache entries.
-                        $wpParticipation = null;
-                        if ($urlPath !== null) {
-                            if (@preg_match('#^' . $matchedRule . '#', trim($urlPath, '/'), $_wpc)) {
-                                $_bits = [];
-                                for ($_wi = 1; $_wi < count($_wpc); $_wi++) {
-                                    $_bits[] = (isset($_wpc[$_wi]) && $_wpc[$_wi] !== '') ? '1' : '0';
+                        $routeAnalysis = \DDTrace\Util\RouteNormalizer::analyzeWordPressRoute(
+                            $matchedRule,
+                            $urlPath
+                        );
+                        if ($routeAnalysis !== null) {
+                            $cacheKey = $matchedRule . '#' . $routeAnalysis['cache_signature'];
+                            $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
+                            if ($normalizedRoute === false) {
+                                $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress(
+                                    $matchedRule,
+                                    $urlPath,
+                                    $routeAnalysis
+                                );
+                                if ($normalizedRoute !== null) {
+                                    \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
                                 }
-                                $wpParticipation = implode('', $_bits);
-                                unset($_wpc, $_wi, $_bits);
                             }
-                        }
-                        $cacheKey = $matchedRule . '#' . ($wpParticipation ?? 'n');
-                        $normalizedRoute = \DDTrace\routing_cache_get($cacheKey);
-                        if ($normalizedRoute === false) {
-                            $normalizedRoute = \DDTrace\Util\RouteNormalizer::normalizeFromWordPress($matchedRule, $urlPath);
-                            if ($normalizedRoute !== null) {
-                                \DDTrace\routing_cache_set($cacheKey, $normalizedRoute);
+                            if ($normalizedRoute !== null && $normalizedRoute !== false) {
+                                $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
                             }
                         }
-                        if ($normalizedRoute !== null && $normalizedRoute !== false) {
-                            $rootSpan->meta[Tag::APPSEC_NORMALIZED_ROUTE] = $normalizedRoute;
-                        }
                     }
                 }
             }
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index d7ccf6c194..1c10e1bec2 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -23,24 +23,25 @@ public static function normalizeFromLaravel(string $routeUri, array $matchedPara
      *
      * @param string     $path          Path template, e.g. "/users/{id}"
      * @param array|null $matchedParams Params actually present in the URL path (not including
-     *                                  route defaults); when provided, absent params are dropped
+     *                                  route defaults); required for dynamic routes
      * @return string|null
      */
     public static function normalizeFromSymfony(string $path, $matchedParams = null)
     {
-        if ($matchedParams !== null) {
-            // Mark params absent from the URL as optional so normalizeBraceSegment drops them.
-            // Use [^}?:]+ to match any param name including UTF-8 characters.
-            $path = preg_replace_callback(
-                '/\{([^}?:]+)\}/',
-                static function ($m) use ($matchedParams) {
-                    return array_key_exists($m[1], $matchedParams) ? $m[0] : '{' . $m[1] . '?}';
-                },
-                $path
-            );
-            return self::normalizeBraceRoute($path, $matchedParams);
+        if ($matchedParams === null) {
+            return self::normalizeBraceRoute($path, []);
         }
-        return self::normalizeBraceRoute($path, []);
+
+        // Mark params absent from the URL as optional so normalizeBraceSegment drops them.
+        // Use [^}?:]+ to match any param name including UTF-8 characters.
+        $path = preg_replace_callback(
+            '/\{([^}?:]+)\}/',
+            static function ($m) use ($matchedParams) {
+                return array_key_exists($m[1], $matchedParams) ? $m[0] : '{' . $m[1] . '?}';
+            },
+            $path
+        );
+        return self::normalizeBraceRoute($path, $matchedParams);
     }
 
     /**
@@ -55,6 +56,7 @@ static function ($m) use ($matchedParams) {
      *                                   whose params were injected by middleware rather than
      *                                   matched from the URL (e.g. Laminas API Tools
      *                                   VersionListener sets :version even without a /v1/ prefix)
+     * @param array|null  $urlMatchedParams Parameters captured by the Regex route matcher
      * @return string|null
      */
     public static function normalizeFromLaminas(string $template, array $matchedParams = [], $urlPath = null, $urlMatchedParams = null)
@@ -68,34 +70,72 @@ public static function normalizeFromLaminas(string $template, array $matchedPara
         }
 
         // Segment routes use :param; Regex routes use %param% (spec format) — handle both.
-        // Detect Regex routes before conversion so we can apply URL-based param filtering.
+        // Detect Regex routes before conversion so matcher capture metadata can be applied.
         $hasPercentParams = (bool) preg_match('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', $expanded);
+        // For Regex routes, defaults inject values into matchedParams even for captures absent
+        // from the URL (e.g. format='html' when no .html in path). Use $urlMatchedParams when
+        // provided by the integration; otherwise fall back to URL-value heuristic or treat all
+        // percent params as required when no URL info is available.
+        if ($hasPercentParams) {
+            if ($urlMatchedParams === null) {
+                if ($urlPath === null) {
+                    // No URL info: treat all percent params as required (present).
+                    $expanded = preg_replace('/%([a-zA-Z_][a-zA-Z0-9_]*)%/', '{$1}', $expanded);
+                    $urlMatchedParams = $matchedParams;
+                } else {
+                    // Heuristic: params whose values appear in the URL are treated as URL-matched.
+                    $inferred = [];
+                    foreach ($matchedParams as $name => $value) {
+                        if (strpos($expanded, '%' . $name . '%') === false) {
+                            continue;
+                        }
+                        $strValue = (string) $value;
+                        if ($strValue !== '' && (
+                            strpos($urlPath, $strValue) !== false ||
+                            strpos($urlPath, rawurlencode($strValue)) !== false ||
+                            strpos(strtolower($urlPath), strtolower(rawurlencode($strValue))) !== false
+                        )) {
+                            $inferred[$name] = $value;
+                        }
+                    }
+                    $expanded = preg_replace_callback(
+                        '/%([a-zA-Z_][a-zA-Z0-9_]*)%/',
+                        static function ($m) use ($inferred) {
+                            return array_key_exists($m[1], $inferred)
+                                ? '{' . $m[1] . '}'
+                                : '{' . $m[1] . '?}';
+                        },
+                        $expanded
+                    );
+                    $urlMatchedParams = $inferred;
+                }
+            } else {
+                $expanded = preg_replace_callback(
+                    '/%([a-zA-Z_][a-zA-Z0-9_]*)%/',
+                    static function ($m) use ($urlMatchedParams) {
+                        return array_key_exists($m[1], $urlMatchedParams)
+                            ? '{' . $m[1] . '}'
+                            : '{' . $m[1] . '?}';
+                    },
+                    $expanded
+                );
+            }
+        }
+
         $braceFormat = self::colonParamsToBraces($expanded);
         $braceFormat = self::percentParamsToBraces($braceFormat);
 
-        // For Regex routes the defaults array injects values into matchedParams even for
-        // optional captures absent from the URL (e.g. format='html' when no .html in path).
-        // Use the URL path to determine which params were actually URL-matched.
-        if ($hasPercentParams && $urlPath !== null) {
-            $effectiveUrlMatchedParams = $urlMatchedParams ?? self::inferSymfonyRouteParams($braceFormat, $urlPath);
-            $braceFormat = preg_replace_callback(
-                '/\{([^}?:]+)\}/',
-                static function ($m) use ($effectiveUrlMatchedParams) {
-                    return array_key_exists($m[1], $effectiveUrlMatchedParams) ? $m[0] : '{' . $m[1] . '?}';
-                },
-                $braceFormat
-            );
-            return self::normalizeBraceRoute($braceFormat, $effectiveUrlMatchedParams);
-        }
-
-        return self::normalizeBraceRoute($braceFormat, $matchedParams);
+        return self::normalizeBraceRoute(
+            $braceFormat,
+            $hasPercentParams ? $urlMatchedParams : $matchedParams
+        );
     }
 
     /**
      * Normalize a WordPress matched_rule (regex).
      *
      * WordPress route matching uses regex rules like "^blog/([^/]+)/?$".
-     * Named parameters are not available; placeholders param1, param2, … are used.
+     * PCRE supplies declared names; unnamed captures use param1, param2, ….
      *
      * @param string      $matchedRule Value of $wp->matched_rule
      * @param string|null $urlPath     Value of $wp->request; used to detect which
@@ -103,231 +143,482 @@ static function ($m) use ($effectiveUrlMatchedParams) {
      *                                 in the match, so phantom segments are not emitted.
      * @return string|null
      */
-    public static function normalizeFromWordPress(string $matchedRule, $urlPath = null)
+    public static function normalizeFromWordPress(string $matchedRule, $urlPath = null, $analysis = null)
     {
-        // Re-run the regex against the actual URL to find which capture groups matched.
-        // Tracks each group individually so gaps from optional groups (e.g. (?:(...))?)
-        // that didn't participate are skipped instead of emitting phantom params.
-        $matchedGroups = null;
-        if ($urlPath !== null) {
-            // Strip both leading and trailing slashes: WordPress $wp->request often includes
-            // a trailing slash, but many WordPress regex rules end with `$` (no `/?`), so a
-            // trailing slash causes the match to fail and leaves $matchedGroups null — which
-            // then treats all optional capture groups as present and produces the wrong shape.
-            if (@preg_match('#^' . $matchedRule . '#', trim($urlPath, '/'), $captures)) {
-                $matchedGroups = [];
-                for ($i = 1; $i < count($captures); $i++) {
-                    if (isset($captures[$i]) && $captures[$i] !== '') {
-                        $matchedGroups[$i] = true;
-                    }
-                }
+        if ($analysis === null) {
+            $analysis = self::analyzeWordPressRoute($matchedRule, $urlPath);
+        }
+
+        return $analysis['normalized_route'] ?? null;
+    }
+
+    /**
+     * Match a WordPress rule and derive the route from PCRE's capture offsets.
+     *
+     * Literal alternatives and optional literals may produce distinct normalized
+     * routes. Rules that can consume variable text outside a capture are rejected,
+     * because their uncaptured request text would otherwise become a route constant.
+     *
+     * When $urlPath is null, a backward-compatible fallback is used that emits all
+     * capture groups without filtering by participation.
+     *
+     * @return array|null
+     */
+    public static function analyzeWordPressRoute(string $matchedRule, $urlPath = null)
+    {
+        if (!self::hasOnlyCapturedWordPressDynamics($matchedRule)) {
+            return null;
+        }
+
+        if ($urlPath === null) {
+            $normalized = self::normalizeWordPressRuleOnly($matchedRule);
+            if ($normalized === null) {
+                return null;
             }
+            return [
+                'normalized_route' => $normalized,
+                'cache_signature'  => $normalized,
+            ];
+        }
+
+        // WordPress uses # delimiters when selecting matched_rule, so an
+        // unescaped # could not occur in a rule that successfully matched.
+        $pattern = '#^' . $matchedRule . '#';
+
+        $subject = trim($urlPath, '/');
+        $matches = [];
+        $flags = PREG_OFFSET_CAPTURE;
+        if (defined('PREG_UNMATCHED_AS_NULL')) {
+            $flags |= constant('PREG_UNMATCHED_AS_NULL');
+        }
+        if (@preg_match($pattern, $subject, $matches, $flags) !== 1) {
+            return null;
+        }
+        if ($matches[0][1] !== 0 || strlen($matches[0][0]) !== strlen($subject)) {
+            return null;
+        }
+
+        $captures = self::wordPressNumericCaptures($matches);
+        if ($captures === null || !self::applyWordPressCaptureNames($matches, $captures)) {
+            return null;
+        }
+
+        $normalizedRoute = self::normalizeWordPressMatch($subject, $captures);
+        if ($normalizedRoute === null) {
+            return null;
         }
 
-        $rule = ltrim($matchedRule, '^');
-        $rule = rtrim($rule, '$');
+        return [
+            'normalized_route' => $normalizedRoute,
+            // This is bounded because uncaptured variable input was rejected above.
+            'cache_signature' => $normalizedRoute,
+        ];
+    }
 
-        if (preg_match('#\\\\?/\?$#', $rule, $m)) {
-            $rule = substr($rule, 0, -strlen($m[0]));
+    /**
+     * Backward-compatible fallback for normalizeFromWordPress when no URL path is available.
+     *
+     * Parses the PCRE rule structure to identify capture groups and segment boundaries
+     * ('/') at capturing-depth 0. All capture groups are treated as present.
+     */
+    private static function normalizeWordPressRuleOnly(string $rule): ?string
+    {
+        // Strip anchors and common trailing patterns
+        $s = $rule;
+        if (isset($s[0]) && $s[0] === '^') {
+            $s = substr($s, 1);
+        }
+        if (substr($s, -3) === '/?$') {
+            $s = substr($s, 0, -3);
+        } elseif (substr($s, -2) === '/$') {
+            $s = substr($s, 0, -2);
+        } elseif (substr($s, -2) === '?$') {
+            $s = substr($s, 0, -2);
+        } elseif (substr($s, -1) === '$') {
+            $s = substr($s, 0, -1);
+        }
+        if (substr($s, -2) === '/?') {
+            $s = substr($s, 0, -2);
         }
 
-        $rule = trim($rule, '/');
-        if ($rule === '') {
+        if ($s === '') {
             return '/';
         }
 
-        // Pull the path separator out of (?:/...) non-capturing groups so that
-        // splitRegexBySlash treats the embedded '/' as a real segment boundary.
-        // Pattern: (?:/foo) means "optional /foo segment" — the '/' belongs at top level.
-        $rule = str_replace('(?:/', '/(?:', $rule);
+        $captureNum = 0;
+        $groups = [];        // stack: true = capturing, false = non-capturing
+        $capturingDepth = 0;
+        $inClass = false;
+        $inQuote = false;
+        $len = strlen($s);
 
-        $segments = self::splitRegexBySlash($rule);
-        $normalizedSegments = [];
-        $paramIndex = 1;
+        $segments = [];
+        $currentSegment = ['static' => '', 'captures' => []];
 
-        foreach ($segments as $segment) {
-            if ($segment === '') {
+        for ($i = 0; $i < $len; $i++) {
+            $char = $s[$i];
+
+            if ($inQuote) {
+                if ($char === '\\' && isset($s[$i + 1]) && $s[$i + 1] === 'E') {
+                    $inQuote = false;
+                    $i++;
+                }
                 continue;
             }
 
-            if (preg_match('/[()[\].*+?|^${}\\\\]/', $segment)) {
-                // If the segment is entirely escaped static text (e.g. file\.json),
-                // decode the backslash escapes and emit it as a plain static segment.
-                if (self::isStaticEscapedRegex($segment)) {
-                    $decoded = preg_replace('/\\\\(.)/', '$1', $segment);
-                    if ($decoded !== '') {
-                        $normalizedSegments[] = self::encodeStaticSegment($decoded);
-                    }
-                    continue;
+            if ($inClass) {
+                if ($char === '\\' && isset($s[$i + 1])) {
+                    $i++;
+                } elseif ($char === ']') {
+                    $inClass = false;
                 }
+                continue;
+            }
 
-                $prefixLen = strcspn($segment, '([{?*+|^$\\');
-                $dynamicPart = substr($segment, $prefixLen);
-                $groupNames = self::extractCaptureGroupNames($dynamicPart);
-                $groupCount = count($groupNames);
-
-                // Only emit a static prefix for purely-regex segments with no capture
-                // groups. When captures exist the whole segment (prefix + captures) maps
-                // to one RFC element, so the prefix must not become a separate element.
-                if ($prefixLen > 0 && $groupCount === 0) {
-                    $staticPart = rtrim(substr($segment, 0, $prefixLen), '/-._');
-                    if ($staticPart !== '') {
-                        $normalizedSegments[] = self::encodeStaticSegment($staticPart);
-                    }
+            if ($char === '\\') {
+                if (!isset($s[$i + 1])) {
+                    break;
+                }
+                $next = $s[++$i];
+                if ($next === 'Q') {
+                    $inQuote = true;
                 }
+                continue;
+            }
 
-                if ($groupCount === 0) {
-                    if ($matchedGroups !== null && !isset($matchedGroups[$paramIndex])) {
-                        $paramIndex++;
-                        continue;
+            if ($char === '[' && $capturingDepth > 0) {
+                $inClass = true;
+                continue;
+            }
+
+            if ($char === '(') {
+                $capturing = true;
+                if (substr($s, $i + 1, 2) === '?:') {
+                    $capturing = false;
+                    $i += 2;
+                } elseif (substr($s, $i + 1, 3) === '?P<') {
+                    $end = strpos($s, '>', $i + 4);
+                    if ($end !== false) {
+                        $i = $end;
                     }
-                    $normalizedSegments[] = '{param' . $paramIndex++ . '}';
-                } else {
-                    $params = [];
-                    for ($j = 0; $j < $groupCount; $j++) {
-                        if ($matchedGroups !== null && !isset($matchedGroups[$paramIndex])) {
-                            $paramIndex++;
-                            continue;
-                        }
-                        $name = $groupNames[$j] ?? null;
-                        $params[] = $name !== null ? self::encodeParamName($name) : 'param' . $paramIndex;
-                        $paramIndex++;
+                } elseif (substr($s, $i + 1, 2) === '?<'
+                    && isset($s[$i + 3]) && strpos('=!', $s[$i + 3]) === false) {
+                    $end = strpos($s, '>', $i + 3);
+                    if ($end !== false) {
+                        $i = $end;
                     }
-                    if (!empty($params)) {
-                        $normalizedSegments[] = '{' . implode('+', $params) . '}';
+                } elseif (isset($s[$i + 1]) && $s[$i + 1] === '?') {
+                    $capturing = false;
+                    $i++;
+                }
+                $groups[] = $capturing;
+                if ($capturing) {
+                    $captureNum++;
+                    if ($capturingDepth === 0) {
+                        $currentSegment['captures'][] = $captureNum;
                     }
+                    $capturingDepth++;
                 }
-            } else {
-                $normalizedSegments[] = self::encodeStaticSegment($segment);
+                continue;
+            }
+
+            if ($char === ')') {
+                $wasCapturing = array_pop($groups);
+                if ($wasCapturing) {
+                    $capturingDepth--;
+                }
+                if (isset($s[$i + 1]) && ($s[$i + 1] === '?' || $s[$i + 1] === '*' || $s[$i + 1] === '+')) {
+                    $i++;
+                } elseif (isset($s[$i + 1]) && $s[$i + 1] === '{') {
+                    $end = strpos($s, '}', $i + 1);
+                    if ($end !== false) {
+                        $i = $end;
+                    }
+                }
+                continue;
+            }
+
+            if ($capturingDepth > 0) {
+                continue;
+            }
+
+            // At capturingDepth === 0
+            if ($char === '/') {
+                $segments[] = $currentSegment;
+                $currentSegment = ['static' => '', 'captures' => []];
+            } elseif ($char === '?' || $char === '*' || $char === '+') {
+                // quantifier — skip
+            } elseif ($char === '{') {
+                $end = strpos($s, '}', $i);
+                if ($end !== false) {
+                    $i = $end;
+                }
+            } elseif ($char === '|') {
+                break; // take first alternative only
+            } elseif ($char !== '.') {
+                $currentSegment['static'] .= $char;
             }
         }
 
-        return '/' . implode('/', $normalizedSegments);
+        $segments[] = $currentSegment;
+
+        $normalized = [];
+        foreach ($segments as $seg) {
+            if (!empty($seg['captures'])) {
+                $params = array_map(static function ($n) { return 'param' . $n; }, $seg['captures']);
+                $normalized[] = '{' . implode('+', $params) . '}';
+            } elseif ($seg['static'] !== '') {
+                $normalized[] = self::encodeStaticSegment($seg['static']);
+            }
+        }
+
+        return '/' . implode('/', $normalized);
     }
 
     /**
-     * Split a regex string by '/' but not inside character classes [...] or groups (...).
-     * Prevents [^/] and (?:/...) from being split into multiple segments.
+     * This is a rejection filter, not a PCRE parser. Capture bodies are opaque.
+     * Outside captures, only literal text, fixed alternatives, optional fixed text,
+     * and non-capturing wrappers are allowed.
      */
-    private static function splitRegexBySlash(string $str): array
+    private static function hasOnlyCapturedWordPressDynamics(string $rule): bool
     {
-        $segments = [];
-        $current = '';
-        $len = strlen($str);
-        $bracketDepth = 0;
-        $parenDepth = 0;
+        $groups = [];
+        $captureDepth = 0;
+        $inClass = false;
+        $inQuote = false;
+        $length = strlen($rule);
 
-        for ($i = 0; $i < $len; $i++) {
-            $c = $str[$i];
+        for ($i = 0; $i < $length; $i++) {
+            $char = $rule[$i];
 
-            if ($c === '\\' && $i + 1 < $len) {
-                $current .= $c . $str[$i + 1];
-                $i++;
+            if ($inQuote) {
+                if ($char === '\\' && isset($rule[$i + 1]) && $rule[$i + 1] === 'E') {
+                    $inQuote = false;
+                    $i++;
+                }
                 continue;
             }
-
-            if ($c === '[' && $parenDepth === 0) {
-                $bracketDepth++;
-                $current .= $c;
-            } elseif ($c === ']' && $bracketDepth > 0) {
-                $bracketDepth--;
-                $current .= $c;
-            } elseif ($c === '(' && $bracketDepth === 0) {
-                $parenDepth++;
-                $current .= $c;
-            } elseif ($c === ')' && $parenDepth > 0 && $bracketDepth === 0) {
-                $parenDepth--;
-                $current .= $c;
-            } elseif ($c === '/' && $bracketDepth === 0 && $parenDepth === 0) {
-                $segments[] = $current;
-                $current = '';
-            } else {
-                $current .= $c;
+            if ($inClass) {
+                if ($char === '\\' && isset($rule[$i + 1])) {
+                    $i++;
+                } elseif ($char === ']') {
+                    $inClass = false;
+                }
+                continue;
+            }
+            if ($char === '\\') {
+                if (!isset($rule[$i + 1])) {
+                    return false;
+                }
+                $escaped = $rule[++$i];
+                if ($escaped === 'Q') {
+                    $inQuote = true;
+                } elseif ($captureDepth === 0 && ctype_alnum($escaped)) {
+                    return false;
+                }
+                continue;
+            }
+            if ($char === '[') {
+                if ($captureDepth === 0) {
+                    return false;
+                }
+                $inClass = true;
+                continue;
+            }
+            if ($char === '(') {
+                $capturing = true;
+                if (isset($rule[$i + 1]) && $rule[$i + 1] === '*') {
+                    if ($captureDepth === 0) {
+                        return false;
+                    }
+                    $capturing = false;
+                } elseif (isset($rule[$i + 1]) && $rule[$i + 1] === '?') {
+                    $namedEnd = self::wordPressNamedCaptureEnd($rule, $i);
+                    if ($namedEnd !== null) {
+                        $i = $namedEnd;
+                    } elseif (substr($rule, $i + 1, 2) === '?:') {
+                        $capturing = false;
+                        $i += 2;
+                    } elseif ($captureDepth > 0) {
+                        // The outer capture covers everything consumed by this group.
+                        $capturing = false;
+                    } else {
+                        return false;
+                    }
+                }
+                $groups[] = $capturing;
+                if ($capturing) {
+                    $captureDepth++;
+                }
+                continue;
+            }
+            if ($char === ')') {
+                if (empty($groups)) {
+                    return false;
+                }
+                if (array_pop($groups)) {
+                    $captureDepth--;
+                }
+                continue;
+            }
+            if ($captureDepth === 0 && strpos('.[*+{', $char) !== false) {
+                return false;
             }
         }
 
-        $segments[] = $current;
-        return $segments;
+        return !$inClass && empty($groups);
     }
 
-    /**
-     * Returns true if $s is entirely made up of backslash-escaped characters and
-     * plain literal text, with no real regex metacharacters (captures, classes, etc.).
-     */
-    private static function isStaticEscapedRegex(string $s): bool
+    /** @return int|null */
+    private static function wordPressNamedCaptureEnd(string $rule, int $open)
     {
-        $len = strlen($s);
-        for ($i = 0; $i < $len; $i++) {
-            if ($s[$i] === '\\') {
-                if ($i + 1 >= $len) {
+        if (substr($rule, $open + 1, 3) === '?P<') {
+            $end = strpos($rule, '>', $open + 4);
+        } elseif (substr($rule, $open + 1, 2) === '?<'
+            && isset($rule[$open + 3]) && strpos('=!', $rule[$open + 3]) === false) {
+            $end = strpos($rule, '>', $open + 3);
+        } elseif (substr($rule, $open + 1, 2) === "?'") {
+            $end = strpos($rule, "'", $open + 3);
+        } else {
+            return null;
+        }
+
+        return $end === false ? null : $end;
+    }
+
+    /** @return array|null */
+    private static function wordPressNumericCaptures(array $matches)
+    {
+        $captures = [];
+        foreach ($matches as $key => $match) {
+            if (!is_int($key) || $key === 0) {
+                continue;
+            }
+            if (!is_array($match) || count($match) !== 2) {
+                return null;
+            }
+            $captures[$key] = [
+                'value' => $match[0],
+                'offset' => $match[1],
+                'present' => $match[1] >= 0 && $match[0] !== '',
+                'name' => null,
+            ];
+        }
+        ksort($captures);
+        return $captures;
+    }
+
+    private static function applyWordPressCaptureNames(array $matches, array &$captures): bool
+    {
+        $pendingName = null;
+        $pendingMatch = null;
+        foreach ($matches as $key => $match) {
+            if (is_string($key)) {
+                if ($pendingName !== null) {
                     return false;
                 }
-                $i++;
-            } elseif (strpos('([{?*+|^$', $s[$i]) !== false) {
+                $pendingName = $key;
+                $pendingMatch = $match;
+                continue;
+            }
+            if ($key === 0 || $pendingName === null) {
+                continue;
+            }
+            if (!isset($captures[$key]) || $pendingMatch !== $match
+                || $captures[$key]['name'] !== null) {
                 return false;
             }
+            $captures[$key]['name'] = $pendingName;
+            $pendingName = null;
+            $pendingMatch = null;
         }
-        return true;
+        return $pendingName === null;
     }
 
-    /**
-     * Extract capture group names from a regex segment.
-     * Named groups ((?P<name>...) or (?<name>...)) return their name; unnamed groups return null.
-     * Non-capturing groups (?:...) and lookarounds are not included.
-     */
-    private static function extractCaptureGroupNames(string $segment): array
+    /** @return string|null */
+    private static function normalizeWordPressMatch(string $subject, array $captures)
     {
-        $names = [];
-        $len = strlen($segment);
-        $inClass = false;
+        if ($subject === '') {
+            return '/';
+        }
 
-        for ($i = 0; $i < $len; $i++) {
-            $c = $segment[$i];
+        $values = explode('/', $subject);
+        $segments = [];
+        $offset = 0;
+        foreach ($values as $index => $value) {
+            $segments[$index] = [
+                'value' => $value,
+                'start' => $offset,
+                'end' => $offset + strlen($value),
+                'captures' => [],
+            ];
+            $offset = $segments[$index]['end'] + 1;
+        }
 
-            if ($c === '\\' && $i + 1 < $len) {
-                $i++;
+        foreach ($captures as $index => &$capture) {
+            if (!$capture['present']) {
                 continue;
             }
+            $captureEnd = $capture['offset'] + strlen($capture['value']);
+            $capture['first_segment'] = null;
+            $capture['last_segment'] = null;
+            foreach ($segments as $segmentIndex => &$segment) {
+                if ($capture['offset'] < $segment['end'] && $captureEnd > $segment['start']) {
+                    $segment['captures'][$index] = true;
+                    if ($capture['first_segment'] === null) {
+                        $capture['first_segment'] = $segmentIndex;
+                    }
+                    $capture['last_segment'] = $segmentIndex;
+                }
+            }
+            unset($segment);
+            if ($capture['first_segment'] === null) {
+                return null;
+            }
+        }
+        unset($capture);
 
-            if ($c === '[' && !$inClass) {
-                $inClass = true;
-            } elseif ($c === ']' && $inClass) {
-                $inClass = false;
-            } elseif ($c === '(' && !$inClass) {
-                if ($i + 1 < $len && $segment[$i + 1] === '?') {
-                    // Named group (?P<name>...) — Python/PCRE syntax
-                    if ($i + 3 < $len && $segment[$i + 2] === 'P' && $segment[$i + 3] === '<') {
-                        $closePos = strpos($segment, '>', $i + 4);
-                        $names[] = $closePos !== false
-                            ? substr($segment, $i + 4, $closePos - ($i + 4))
-                            : null;
-                    // Named group (?<name>...) but not lookbehind (?<=...) / (?<!...)
-                    } elseif (
-                        $i + 2 < $len && $segment[$i + 2] === '<' &&
-                        isset($segment[$i + 3]) && $segment[$i + 3] !== '=' && $segment[$i + 3] !== '!'
-                    ) {
-                        $closePos = strpos($segment, '>', $i + 3);
-                        $names[] = $closePos !== false
-                            ? substr($segment, $i + 3, $closePos - ($i + 3))
-                            : null;
+        $normalized = [];
+        for ($segmentIndex = 0; $segmentIndex < count($segments); $segmentIndex++) {
+            if (empty($segments[$segmentIndex]['captures'])) {
+                $normalized[] = self::encodeStaticSegment($segments[$segmentIndex]['value']);
+                continue;
+            }
+
+            $lastSegment = $segmentIndex;
+            do {
+                $previousLast = $lastSegment;
+                foreach ($captures as $capture) {
+                    if (!$capture['present'] || $capture['first_segment'] > $lastSegment
+                        || $capture['last_segment'] < $segmentIndex) {
+                        continue;
                     }
-                    // (?:...), (?=...), etc. — not a capturing group, skip
-                } else {
-                    $names[] = null;
+                    $lastSegment = max($lastSegment, $capture['last_segment']);
+                }
+            } while ($lastSegment !== $previousLast);
+
+            $params = [];
+            foreach ($captures as $index => $capture) {
+                if (!$capture['present'] || $capture['first_segment'] > $lastSegment
+                    || $capture['last_segment'] < $segmentIndex) {
+                    continue;
                 }
+                $params[] = $capture['name'] !== null
+                    ? self::encodeParamName($capture['name'])
+                    : 'param' . $index;
             }
+            $normalized[] = '{' . implode('+', $params) . '}';
+            $segmentIndex = $lastSegment;
         }
 
-        return $names;
+        return '/' . implode('/', $normalized);
     }
 
     /**
      * Normalize a route that uses {param} notation.
      */
-    private static function normalizeBraceRoute(
-        string $route,
-        array $matchedParams
-    ) {
+    private static function normalizeBraceRoute(string $route, array $matchedParams)
+    {
         $route = trim($route);
         if ($route === '' || $route === '/') {
             return '/';
@@ -340,7 +631,7 @@ private static function normalizeBraceRoute(
             $route = '/' . $route;
         }
 
-        // Strip inline constraints (e.g. Slim's {name:[^/]+} → {name}) before
+        // Strip inline constraints (e.g. {name:[^/]+} → {name}) before
         // splitting so that a '/' inside a constraint does not break the segment
         // split. The optional marker '?' is preserved: {name?:[0-9]+} → {name?}.
         $route = preg_replace('/\{([^}?:]+(\?)?):([^}]*)\}/', '{$1}', $route);
@@ -607,76 +898,4 @@ public static function encodeParamName(string $name): string
         }
         return $result;
     }
-
-    /**
-     * Infer which Symfony route parameters were actually present in the URL path
-     * (vs. injected as route defaults).
-     *
-     * Handles three kinds of template segments:
-     *  - Whole-segment param:  {id}           → matched if URL has a segment at that position
-     *  - Mixed segment:        {id}.{_format} → matched if URL segment matches template regex
-     *  - Static segment:       users          → no params extracted
-     *
-     * UTF-8 parameter names are supported.
-     */
-    public static function inferSymfonyRouteParams(string $template, string $urlPath): array
-    {
-        $templateSegments = array_values(array_filter(explode('/', $template), 'strlen'));
-        // Decode percent-encoded URL path so template literals (e.g. café) compare
-        // correctly against encoded URL segments (e.g. caf%C3%A9).
-        $urlSegments = array_values(array_filter(
-            array_map('rawurldecode', explode('/', $urlPath)),
-            'strlen'
-        ));
-
-        $matched = [];
-        $urlIdx  = 0;
-
-        foreach ($templateSegments as $seg) {
-            if (preg_match('/^\{([^}?:]+)\}$/', $seg, $m)) {
-                // Whole-segment param — present if there is a URL segment at this position
-                if ($urlIdx < count($urlSegments)) {
-                    $matched[$m[1]] = $urlSegments[$urlIdx];
-                }
-                $urlIdx++;
-            } elseif (preg_match('/\{/', $seg)) {
-                // Mixed segment (static text + one or more params): determine presence by
-                // trying to match the URL segment, dropping trailing optional params as needed.
-                if ($urlIdx < count($urlSegments)) {
-                    preg_match_all('/\{([^}?:]+)\}/', $seg, $pm);
-                    $paramNames  = $pm[1];
-                    $n           = count($paramNames);
-                    if ($n > 0) {
-                        $urlSeg      = $urlSegments[$urlIdx];
-                        $staticParts = preg_split('/\{[^}]+\}/', $seg);
-                        // Try with k params (k = n, n-1, ..., 1). Drop params from the right
-                        // until the URL segment matches. This handles optional trailing captures
-                        // that were injected as route defaults but absent from the URL.
-                        for ($k = $n; $k >= 1; $k--) {
-                            $regexBody = '';
-                            for ($i = 0; $i < $k; $i++) {
-                                $regexBody .= preg_quote($staticParts[$i], '/') . '(.+)';
-                            }
-                            // Only include the trailing static part for a full match
-                            if ($k === $n) {
-                                $regexBody .= preg_quote($staticParts[$n], '/');
-                            }
-                            if (@preg_match('/^' . $regexBody . '$/', $urlSeg)) {
-                                for ($i = 0; $i < $k; $i++) {
-                                    $matched[$paramNames[$i]] = true;
-                                }
-                                break;
-                            }
-                        }
-                    }
-                }
-                $urlIdx++;
-            } else {
-                // Pure static segment — advance URL position
-                $urlIdx++;
-            }
-        }
-
-        return $matched;
-    }
 }
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index c945920655..71f2c3d694 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -168,49 +168,6 @@ public function testSymfonyNoMatchedParamsArgKeepsAll()
         $this->assertSame('/blog/{page}', $result);
     }
 
-    // inferSymfonyRouteParams — used to build the cache key in SymfonyIntegration
-
-    public function testInferSymfonyRouteParamsRequiredParamsAlwaysPresent()
-    {
-        $params = RouteNormalizer::inferSymfonyRouteParams('/users/{id}', '/users/42');
-        $this->assertArrayHasKey('id', $params);
-    }
-
-    public function testInferSymfonyRouteParamsOptionalParamAbsent()
-    {
-        // Route /posts/{page} where page has a Symfony default — URL /posts does not include page.
-        // The integration code uses array_keys($params) as cache key suffix; this must be []
-        // so that the 'absent' cache entry is distinct from the 'present' one.
-        $params = RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts');
-        $this->assertSame([], $params);
-    }
-
-    public function testInferSymfonyRouteParamsOptionalParamPresent()
-    {
-        // URL /posts/2 provides page explicitly — must be in the returned params.
-        $params = RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts/2');
-        $this->assertArrayHasKey('page', $params);
-    }
-
-    public function testInferSymfonyRouteParamsCacheKeysDiffer()
-    {
-        // Core invariant for correct cache behaviour: the two URL patterns for the same route
-        // produce different param key sets, so the cache key suffix encodes presence/absence.
-        $absent  = array_keys(RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts'));
-        $present = array_keys(RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts/2'));
-        $this->assertNotSame($absent, $present);
-
-        // And normalizeFromSymfony produces the correct result for each case.
-        $this->assertSame('/posts', RouteNormalizer::normalizeFromSymfony(
-            '/posts/{page}',
-            RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts')
-        ));
-        $this->assertSame('/posts/{page}', RouteNormalizer::normalizeFromSymfony(
-            '/posts/{page}',
-            RouteNormalizer::inferSymfonyRouteParams('/posts/{page}', '/posts/2')
-        ));
-    }
-
     // normalizeFromLaminas
 
     public function testLaminasSimpleColon()

From 073c5d6bd53e7b86185d38106d210430565a9ccf Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Wed, 9 Sep 2026 12:54:26 +0200
Subject: [PATCH 48/54] Fix compatibility error

---
 src/DDTrace/Util/RouteNormalizer.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 1c10e1bec2..1c80722db4 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -221,7 +221,8 @@ public static function analyzeWordPressRoute(string $matchedRule, $urlPath = nul
      * Parses the PCRE rule structure to identify capture groups and segment boundaries
      * ('/') at capturing-depth 0. All capture groups are treated as present.
      */
-    private static function normalizeWordPressRuleOnly(string $rule): ?string
+    /** @return string|null */
+    private static function normalizeWordPressRuleOnly(string $rule)
     {
         // Strip anchors and common trailing patterns
         $s = $rule;

From 9ae0ce8ca5da3b0490cd00e69a8ab7eae9d305b0 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Tue, 29 Sep 2026 15:47:08 +0200
Subject: [PATCH 49/54] Fix pipeline

---
 src/bridge/_files_tracer.php | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/bridge/_files_tracer.php b/src/bridge/_files_tracer.php
index fccea720f0..7d924b7fe7 100644
--- a/src/bridge/_files_tracer.php
+++ b/src/bridge/_files_tracer.php
@@ -41,5 +41,4 @@
     __DIR__ . '/../DDTrace/Propagators/TextMap.php',
     __DIR__ . '/../DDTrace/ScopeManager.php',
     __DIR__ . '/../DDTrace/Tracer.php',
-    __DIR__ . '/../DDTrace/Util/RouteNormalizer.php',
 ];

From 96fe8a9c76830ade0233f1f073997fe907591952 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 2 Oct 2026 12:38:27 +0200
Subject: [PATCH 50/54] Adress F09 and F12

---
 .../Laminas/LaminasIntegration.php            |  25 ++++
 .../Integrations/Symfony/EndpointCatalog.php  |  69 +++++++----
 src/DDTrace/Util/RouteNormalizer.php          | 117 +++++++++++++++++-
 .../Util/Normalizer/RouteNormalizerTest.php   |  55 ++++++++
 4 files changed, 242 insertions(+), 24 deletions(-)

diff --git a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
index 156e8d18c0..93f63e384e 100644
--- a/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
+++ b/src/DDTrace/Integrations/Laminas/LaminasIntegration.php
@@ -1440,7 +1440,22 @@ private static function matchLaminasSegmentParts(
         return $states;
     }
 
+    /** @var array<string, mixed> cached leaf-route lookups keyed by stack-hash + name */
+    private static $leafRouteCache = [];
+
+    /** @var array<string, string|null> cached template lookups keyed by stack-hash + name */
+    private static $namedStackTemplateCache = [];
+
     public static function getLeafRouteFromNamedRouteStack($stack, string $matchedName)
+    {
+        $cacheKey = \spl_object_hash($stack) . "\0" . $matchedName;
+        if (\array_key_exists($cacheKey, self::$leafRouteCache)) {
+            return self::$leafRouteCache[$cacheKey];
+        }
+        return self::$leafRouteCache[$cacheKey] = self::computeLeafRouteFromNamedRouteStack($stack, $matchedName);
+    }
+
+    private static function computeLeafRouteFromNamedRouteStack($stack, string $matchedName)
     {
         $segments = \explode('/', $matchedName, 2);
         $route = self::laminasGetNamedRouteFromStack($stack, $segments[0]);
@@ -1464,6 +1479,16 @@ public static function getLeafRouteFromNamedRouteStack($stack, string $matchedNa
     }
 
     public static function httpRouteTemplateFromNamedRouteStack($stack, string $matchedName): ?string
+    {
+        $cacheKey = \spl_object_hash($stack) . "\0" . $matchedName;
+        if (\array_key_exists($cacheKey, self::$namedStackTemplateCache)) {
+            return self::$namedStackTemplateCache[$cacheKey];
+        }
+        return self::$namedStackTemplateCache[$cacheKey]
+            = self::computeHttpRouteTemplateFromNamedRouteStack($stack, $matchedName);
+    }
+
+    private static function computeHttpRouteTemplateFromNamedRouteStack($stack, string $matchedName): ?string
     {
         $segments = \explode('/', $matchedName, 2);
         $route = self::laminasGetNamedRouteFromStack($stack, $segments[0]);
diff --git a/src/DDTrace/Integrations/Symfony/EndpointCatalog.php b/src/DDTrace/Integrations/Symfony/EndpointCatalog.php
index 32fcfad35c..55c2ad6ceb 100644
--- a/src/DDTrace/Integrations/Symfony/EndpointCatalog.php
+++ b/src/DDTrace/Integrations/Symfony/EndpointCatalog.php
@@ -9,6 +9,12 @@
 
 class EndpointCatalog
 {
+    /** @var array<string, string|null> keyed by "$cacheDir\0$routeName" */
+    private static $pathCache = [];
+
+    /** @var array<string, array|false> keyed by $cacheDir; false means "no cache file" */
+    private static $generatorArrayByDir = [];
+
     public static function generate(ContainerInterface $container): array
     {
         static $memo = null;
@@ -36,6 +42,11 @@ public static function generate(ContainerInterface $container): array
      * or the route is not found.
      *
      * This never falls back to getRouteCollection().
+     *
+     * The route array is loaded once per cache dir and the per-route result is
+     * memoized, so repeated requests for the same route skip the filesystem
+     * probe, the require of the compiled routes file, and the token-to-template
+     * reconstruction.
      */
     public static function pathForRoute($routeName, ContainerInterface $container)
     {
@@ -44,28 +55,49 @@ public static function pathForRoute($routeName, ContainerInterface $container)
             return null;
         }
 
+        $cacheKey = $cacheDir . "\0" . $routeName;
+        if (array_key_exists($cacheKey, self::$pathCache)) {
+            return self::$pathCache[$cacheKey];
+        }
+
+        $gen = self::loadGeneratorArray($cacheDir);
+        if ($gen === false || !isset($gen[$routeName])) {
+            return self::$pathCache[$cacheKey] = null;
+        }
+
+        $routeData = $gen[$routeName];
+        $tokens = isset($routeData[3]) ? $routeData[3] : null;
+        if (!is_array($tokens)) {
+            return self::$pathCache[$cacheKey] = null;
+        }
+
+        return self::$pathCache[$cacheKey] = self::tokensToPathTemplate($tokens);
+    }
+
+    /**
+     * Load Symfony's compiled URL generator array once per cache dir. Returns
+     * false when neither candidate file exists.
+     *
+     * @return array|false
+     */
+    private static function loadGeneratorArray(string $cacheDir)
+    {
+        if (array_key_exists($cacheDir, self::$generatorArrayByDir)) {
+            return self::$generatorArrayByDir[$cacheDir];
+        }
+
         $base = rtrim($cacheDir, '/\\') . DIRECTORY_SEPARATOR;
         // Symfony 5+ uses url_generating_routes.php; 4.3–4.4 uses UrlGenerator.php
         $genFile = $base . 'url_generating_routes.php';
         if (!is_file($genFile)) {
             $genFile = $base . 'UrlGenerator.php';
             if (!is_file($genFile)) {
-                return null;
+                return self::$generatorArrayByDir[$cacheDir] = false;
             }
         }
 
         $gen = require $genFile;
-        if (!is_array($gen) || !isset($gen[$routeName])) {
-            return null;
-        }
-
-        $routeData = $gen[$routeName];
-        $tokens = isset($routeData[3]) ? $routeData[3] : null;
-        if (!is_array($tokens)) {
-            return null;
-        }
-
-        return self::tokensToPathTemplate($tokens);
+        return self::$generatorArrayByDir[$cacheDir] = is_array($gen) ? $gen : false;
     }
 
 
@@ -82,20 +114,13 @@ private static function getCacheDir(ContainerInterface $container)
 
     private static function fromRouterCache($cacheDir): array
     {
-        $genFile = rtrim($cacheDir, '/\\') . DIRECTORY_SEPARATOR . 'url_generating_routes.php';
-        $matchFile = rtrim($cacheDir, '/\\') . DIRECTORY_SEPARATOR . 'url_matching_routes.php';
-
-        if (!is_file($genFile)) {
-            return [];
-        }
-
-        // NOTE: These files are generated by Symfony, so require is acceptable if path is trusted.
-        $gen = require $genFile;
-        if (!is_array($gen)) {
+        $gen = self::loadGeneratorArray($cacheDir);
+        if ($gen === false) {
             return [];
         }
 
         $methodsByRoute = [];
+        $matchFile = rtrim($cacheDir, '/\\') . DIRECTORY_SEPARATOR . 'url_matching_routes.php';
         if (is_file($matchFile)) {
             $matchData = require $matchFile;
             if (is_array($matchData)) {
diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 1c80722db4..76f14fb7b9 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -5,6 +5,16 @@
 /** @internal */
 class RouteNormalizer
 {
+    /**
+     * In-process cache of WordPress rule plans: safety-scan result and (when the
+     * rule is deterministic) the precomputed normalized route. The scan over a
+     * rule's characters is pure, so the first result stays valid for the lifetime
+     * of the process.
+     *
+     * @var array<string, array{safe: bool, deterministic: bool, deterministic_route: string|null}>
+     */
+    private static $wordPressRulePlans = [];
+
     /**
      * Normalize a Laravel route URI.
      *
@@ -166,12 +176,23 @@ public static function normalizeFromWordPress(string $matchedRule, $urlPath = nu
      */
     public static function analyzeWordPressRoute(string $matchedRule, $urlPath = null)
     {
-        if (!self::hasOnlyCapturedWordPressDynamics($matchedRule)) {
+        $plan = self::wordPressRulePlan($matchedRule);
+        if (!$plan['safe']) {
             return null;
         }
 
+        // Deterministic rules have no optional captures: their normalized form
+        // depends only on the rule, not on the URL. Skip preg_match + capture
+        // analysis entirely and return the precomputed route.
+        if ($plan['deterministic'] && $plan['deterministic_route'] !== null) {
+            return [
+                'normalized_route' => $plan['deterministic_route'],
+                'cache_signature'  => $plan['deterministic_route'],
+            ];
+        }
+
         if ($urlPath === null) {
-            $normalized = self::normalizeWordPressRuleOnly($matchedRule);
+            $normalized = $plan['deterministic_route'];
             if ($normalized === null) {
                 return null;
             }
@@ -376,6 +397,98 @@ private static function normalizeWordPressRuleOnly(string $rule)
         return '/' . implode('/', $normalized);
     }
 
+    /**
+     * Parse a WordPress rule once and remember whether it is safe to normalize,
+     * whether it is "deterministic" (its normalized form does not depend on the
+     * URL), and — when deterministic — its precomputed normalized route.
+     *
+     * The returned shape:
+     *   [
+     *     'safe'                => bool,
+     *     'deterministic'       => bool,
+     *     'deterministic_route' => string|null,
+     *   ]
+     *
+     * @return array{safe: bool, deterministic: bool, deterministic_route: string|null}
+     */
+    public static function wordPressRulePlan(string $rule): array
+    {
+        if (isset(self::$wordPressRulePlans[$rule])) {
+            return self::$wordPressRulePlans[$rule];
+        }
+
+        $safe = self::hasOnlyCapturedWordPressDynamics($rule);
+        $deterministic = $safe && !self::wordPressRuleHasOptionalCaptures($rule);
+        $deterministicRoute = $safe ? self::normalizeWordPressRuleOnly($rule) : null;
+
+        return self::$wordPressRulePlans[$rule] = [
+            'safe' => $safe,
+            'deterministic' => $deterministic,
+            'deterministic_route' => $deterministicRoute,
+        ];
+    }
+
+    /**
+     * Scan for any group whose closing `)` is followed by a quantifier that can
+     * drop the group (`?`, `*`, `{0,...}`), ignoring character classes and \Q...\E
+     * quoted spans. Rules without such quantifiers always have every capture
+     * participate in a successful match, so their normalized form is URL-independent.
+     */
+    private static function wordPressRuleHasOptionalCaptures(string $rule): bool
+    {
+        $inClass = false;
+        $inQuote = false;
+        $length = strlen($rule);
+
+        for ($i = 0; $i < $length; $i++) {
+            $char = $rule[$i];
+
+            if ($inQuote) {
+                if ($char === '\\' && isset($rule[$i + 1]) && $rule[$i + 1] === 'E') {
+                    $inQuote = false;
+                    $i++;
+                }
+                continue;
+            }
+            if ($inClass) {
+                if ($char === '\\' && isset($rule[$i + 1])) {
+                    $i++;
+                } elseif ($char === ']') {
+                    $inClass = false;
+                }
+                continue;
+            }
+            if ($char === '\\') {
+                if (!isset($rule[$i + 1])) {
+                    return true;
+                }
+                if ($rule[++$i] === 'Q') {
+                    $inQuote = true;
+                }
+                continue;
+            }
+            if ($char === '[') {
+                $inClass = true;
+                continue;
+            }
+            if ($char === ')' && isset($rule[$i + 1])) {
+                $next = $rule[$i + 1];
+                if ($next === '?' || $next === '*') {
+                    return true;
+                }
+                if ($next === '{') {
+                    // {0,...} and {0} drop the group; {n>=1,...} keep it.
+                    $end = strpos($rule, '}', $i + 2);
+                    if ($end !== false && isset($rule[$i + 2]) && $rule[$i + 2] === '0') {
+                        return true;
+                    }
+                }
+            }
+        }
+
+        return false;
+    }
+
     /**
      * This is a rejection filter, not a PCRE parser. Capture bodies are opaque.
      * Outside captures, only literal text, fixed alternatives, optional fixed text,
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index 71f2c3d694..e1a419496a 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -346,6 +346,61 @@ public function testWordPressBothCapturesPresentInOptionalGroup()
         $this->assertSame('/{param1+param2}', $result);
     }
 
+    // F-12: Rule-plan cache lets deterministic rules skip the preg_match + capture
+    // analysis entirely, and the per-rule safety scan runs only once.
+
+    public function testWordPressRulePlanMarksDeterministicRule()
+    {
+        $plan = RouteNormalizer::wordPressRulePlan('^blog/([^/]+)/?$');
+        $this->assertTrue($plan['safe']);
+        $this->assertTrue($plan['deterministic']);
+        $this->assertSame('/blog/{param1}', $plan['deterministic_route']);
+    }
+
+    public function testWordPressRulePlanMarksOptionalCaptureAsNonDeterministic()
+    {
+        $plan = RouteNormalizer::wordPressRulePlan('^([^/]+)(?:/([0-9]+))?/?$');
+        $this->assertTrue($plan['safe']);
+        $this->assertFalse($plan['deterministic']);
+    }
+
+    public function testWordPressRulePlanRejectsUnsafeRule()
+    {
+        // Unanchored variable text outside captures: not safe to normalize.
+        $plan = RouteNormalizer::wordPressRulePlan('^foo.*bar$');
+        $this->assertFalse($plan['safe']);
+        $this->assertFalse($plan['deterministic']);
+        $this->assertNull($plan['deterministic_route']);
+    }
+
+    public function testDeterministicWordPressRuleShortCircuitsWithoutUrlPath()
+    {
+        // Deterministic rule: urlPath is ignored because the normalized route only
+        // depends on the rule structure.
+        $withUrl = RouteNormalizer::normalizeFromWordPress('^blog/([^/]+)/?$', 'blog/foo');
+        $withoutUrl = RouteNormalizer::normalizeFromWordPress('^blog/([^/]+)/?$');
+        $this->assertSame($withUrl, $withoutUrl);
+        $this->assertSame('/blog/{param1}', $withUrl);
+    }
+
+    public function testNonDeterministicWordPressRuleStillUsesUrlPath()
+    {
+        // Participation of the optional capture still depends on the URL.
+        $absent = RouteNormalizer::normalizeFromWordPress('^([^/]+)(?:/([0-9]+))?/?$', 'simple');
+        $present = RouteNormalizer::normalizeFromWordPress('^([^/]+)(?:/([0-9]+))?/?$', 'simple/123');
+        $this->assertSame('/{param1}', $absent);
+        $this->assertSame('/{param1}/{param2}', $present);
+    }
+
+    public function testWordPressRulePlanIsMemoized()
+    {
+        // Same reference-equal plan should come back for the same rule, since
+        // the plan is cached in-process.
+        $first = RouteNormalizer::wordPressRulePlan('^blog/([^/]+)/?$');
+        $second = RouteNormalizer::wordPressRulePlan('^blog/([^/]+)/?$');
+        $this->assertSame($first, $second);
+    }
+
     public function testStaticPrefixLeadingTildePreservedWhenOptionalAbsent()
     {
         // F-04: rtrim — a leading special char like '~' must survive when the optional

From ba8fef4ced67a9b87ddb0cf986683e3dcf2111b0 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 2 Oct 2026 14:53:53 +0200
Subject: [PATCH 51/54] Fix issues

---
 src/DDTrace/Util/RouteNormalizer.php          | 109 +++---------------
 .../Application/config/module.config.php      |  64 ++++++++--
 .../Util/Normalizer/RouteNormalizerTest.php   |  76 +++++++-----
 3 files changed, 122 insertions(+), 127 deletions(-)

diff --git a/src/DDTrace/Util/RouteNormalizer.php b/src/DDTrace/Util/RouteNormalizer.php
index 76f14fb7b9..e005a4814f 100644
--- a/src/DDTrace/Util/RouteNormalizer.php
+++ b/src/DDTrace/Util/RouteNormalizer.php
@@ -6,12 +6,13 @@
 class RouteNormalizer
 {
     /**
-     * In-process cache of WordPress rule plans: safety-scan result and (when the
-     * rule is deterministic) the precomputed normalized route. The scan over a
-     * rule's characters is pure, so the first result stays valid for the lifetime
-     * of the process.
+     * In-process cache of WordPress rule plans. Each entry stores whether the
+     * rule is safe to normalize (result of the hasOnlyCapturedWordPressDynamics
+     * scan) plus the rule-only normalized route used as the fallback when no
+     * URL path is available. Both are pure functions of the rule, so the first
+     * result stays valid for the lifetime of the process.
      *
-     * @var array<string, array{safe: bool, deterministic: bool, deterministic_route: string|null}>
+     * @var array<string, array{safe: bool, rule_only_route: string|null}>
      */
     private static $wordPressRulePlans = [];
 
@@ -181,18 +182,12 @@ public static function analyzeWordPressRoute(string $matchedRule, $urlPath = nul
             return null;
         }
 
-        // Deterministic rules have no optional captures: their normalized form
-        // depends only on the rule, not on the URL. Skip preg_match + capture
-        // analysis entirely and return the precomputed route.
-        if ($plan['deterministic'] && $plan['deterministic_route'] !== null) {
-            return [
-                'normalized_route' => $plan['deterministic_route'],
-                'cache_signature'  => $plan['deterministic_route'],
-            ];
-        }
-
         if ($urlPath === null) {
-            $normalized = $plan['deterministic_route'];
+            // Backward-compatible fallback for callers without URL info: emit
+            // all capture groups without filtering by participation. Does not
+            // handle named captures or escaped literals the same way as the
+            // URL-matched path, so it is used only when no URL is available.
+            $normalized = $plan['rule_only_route'];
             if ($normalized === null) {
                 return null;
             }
@@ -398,18 +393,15 @@ private static function normalizeWordPressRuleOnly(string $rule)
     }
 
     /**
-     * Parse a WordPress rule once and remember whether it is safe to normalize,
-     * whether it is "deterministic" (its normalized form does not depend on the
-     * URL), and — when deterministic — its precomputed normalized route.
-     *
-     * The returned shape:
+     * Parse a WordPress rule once and remember whether it is safe to normalize
+     * plus a rule-only normalized route for callers that have no URL to match
+     * against. The returned shape:
      *   [
-     *     'safe'                => bool,
-     *     'deterministic'       => bool,
-     *     'deterministic_route' => string|null,
+     *     'safe'            => bool,
+     *     'rule_only_route' => string|null,  // from normalizeWordPressRuleOnly
      *   ]
      *
-     * @return array{safe: bool, deterministic: bool, deterministic_route: string|null}
+     * @return array{safe: bool, rule_only_route: string|null}
      */
     public static function wordPressRulePlan(string $rule): array
     {
@@ -418,77 +410,14 @@ public static function wordPressRulePlan(string $rule): array
         }
 
         $safe = self::hasOnlyCapturedWordPressDynamics($rule);
-        $deterministic = $safe && !self::wordPressRuleHasOptionalCaptures($rule);
-        $deterministicRoute = $safe ? self::normalizeWordPressRuleOnly($rule) : null;
+        $ruleOnlyRoute = $safe ? self::normalizeWordPressRuleOnly($rule) : null;
 
         return self::$wordPressRulePlans[$rule] = [
             'safe' => $safe,
-            'deterministic' => $deterministic,
-            'deterministic_route' => $deterministicRoute,
+            'rule_only_route' => $ruleOnlyRoute,
         ];
     }
 
-    /**
-     * Scan for any group whose closing `)` is followed by a quantifier that can
-     * drop the group (`?`, `*`, `{0,...}`), ignoring character classes and \Q...\E
-     * quoted spans. Rules without such quantifiers always have every capture
-     * participate in a successful match, so their normalized form is URL-independent.
-     */
-    private static function wordPressRuleHasOptionalCaptures(string $rule): bool
-    {
-        $inClass = false;
-        $inQuote = false;
-        $length = strlen($rule);
-
-        for ($i = 0; $i < $length; $i++) {
-            $char = $rule[$i];
-
-            if ($inQuote) {
-                if ($char === '\\' && isset($rule[$i + 1]) && $rule[$i + 1] === 'E') {
-                    $inQuote = false;
-                    $i++;
-                }
-                continue;
-            }
-            if ($inClass) {
-                if ($char === '\\' && isset($rule[$i + 1])) {
-                    $i++;
-                } elseif ($char === ']') {
-                    $inClass = false;
-                }
-                continue;
-            }
-            if ($char === '\\') {
-                if (!isset($rule[$i + 1])) {
-                    return true;
-                }
-                if ($rule[++$i] === 'Q') {
-                    $inQuote = true;
-                }
-                continue;
-            }
-            if ($char === '[') {
-                $inClass = true;
-                continue;
-            }
-            if ($char === ')' && isset($rule[$i + 1])) {
-                $next = $rule[$i + 1];
-                if ($next === '?' || $next === '*') {
-                    return true;
-                }
-                if ($next === '{') {
-                    // {0,...} and {0} drop the group; {n>=1,...} keep it.
-                    $end = strpos($rule, '}', $i + 2);
-                    if ($end !== false && isset($rule[$i + 2]) && $rule[$i + 2] === '0') {
-                        return true;
-                    }
-                }
-            }
-        }
-
-        return false;
-    }
-
     /**
      * This is a rejection filter, not a PCRE parser. Capture bodies are opaque.
      * Outside captures, only literal text, fixed alternatives, optional fixed text,
diff --git a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
index 02b95fa1a5..f37e273959 100644
--- a/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
+++ b/tests/Frameworks/Laminas/Mvc/Version_3_3/module/Application/config/module.config.php
@@ -266,6 +266,19 @@
                     ],
                 ],
             ],
+            'regex_ambiguous_default' => [
+                'type' => Regex::class,
+                'options' => [
+                    'regex' => '/normalized-regex-ambiguous/' .
+                        '(?P<name>.+)(?:\.(?P<ext>pdf|json))?',
+                    'spec' => '/normalized-regex-ambiguous/%name%.%ext%',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'ambiguous',
+                        'ext' => 'html',
+                    ],
+                ],
+            ],
             'normalized_encoded_optional' => [
                 'type' => Segment::class,
                 'options' => [
@@ -289,6 +302,47 @@
                     ],
                 ],
             ],
+            'normalized_static_prefix_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-static-prefix[/normalized]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_dynamic_prefix_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-dynamic-prefix[/:value]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                        'value' => 'normalized-dynamic-prefix',
+                    ],
+                ],
+            ],
+            'normalized_encoded_cache_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-encoded-cache[/:slug]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
+            'normalized_encoded_lowercase_optional' => [
+                'type' => Segment::class,
+                'options' => [
+                    'route' => '/normalized-encoded-lowercase[/:slug]',
+                    'defaults' => [
+                        'controller' => DynamicPathController::class,
+                        'action' => 'index',
+                    ],
+                ],
+            ],
             'normalized_hyphenated_name' => [
                 'type' => Segment::class,
                 'options' => [
@@ -321,16 +375,6 @@
                     ],
                 ],
             ],
-            'normalized_translated_literal' => [
-                'type' => Segment::class,
-                'options' => [
-                    'route' => '/normalized/{translated_page}',
-                    'defaults' => [
-                        'controller' => DynamicPathController::class,
-                        'action' => 'index',
-                    ],
-                ],
-            ],
             'scheme_http_gate' => [
                 'type' => Scheme::class,
                 'options' => [
diff --git a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
index e1a419496a..f073acd4d1 100644
--- a/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
+++ b/tests/Unit/Util/Normalizer/RouteNormalizerTest.php
@@ -346,22 +346,14 @@ public function testWordPressBothCapturesPresentInOptionalGroup()
         $this->assertSame('/{param1+param2}', $result);
     }
 
-    // F-12: Rule-plan cache lets deterministic rules skip the preg_match + capture
-    // analysis entirely, and the per-rule safety scan runs only once.
+    // F-12: Rule-plan cache memoizes the per-rule safety scan and the
+    // backward-compatible rule-only fallback used when no URL is available.
 
-    public function testWordPressRulePlanMarksDeterministicRule()
+    public function testWordPressRulePlanAcceptsSafeRule()
     {
         $plan = RouteNormalizer::wordPressRulePlan('^blog/([^/]+)/?$');
         $this->assertTrue($plan['safe']);
-        $this->assertTrue($plan['deterministic']);
-        $this->assertSame('/blog/{param1}', $plan['deterministic_route']);
-    }
-
-    public function testWordPressRulePlanMarksOptionalCaptureAsNonDeterministic()
-    {
-        $plan = RouteNormalizer::wordPressRulePlan('^([^/]+)(?:/([0-9]+))?/?$');
-        $this->assertTrue($plan['safe']);
-        $this->assertFalse($plan['deterministic']);
+        $this->assertSame('/blog/{param1}', $plan['rule_only_route']);
     }
 
     public function testWordPressRulePlanRejectsUnsafeRule()
@@ -369,23 +361,13 @@ public function testWordPressRulePlanRejectsUnsafeRule()
         // Unanchored variable text outside captures: not safe to normalize.
         $plan = RouteNormalizer::wordPressRulePlan('^foo.*bar$');
         $this->assertFalse($plan['safe']);
-        $this->assertFalse($plan['deterministic']);
-        $this->assertNull($plan['deterministic_route']);
-    }
-
-    public function testDeterministicWordPressRuleShortCircuitsWithoutUrlPath()
-    {
-        // Deterministic rule: urlPath is ignored because the normalized route only
-        // depends on the rule structure.
-        $withUrl = RouteNormalizer::normalizeFromWordPress('^blog/([^/]+)/?$', 'blog/foo');
-        $withoutUrl = RouteNormalizer::normalizeFromWordPress('^blog/([^/]+)/?$');
-        $this->assertSame($withUrl, $withoutUrl);
-        $this->assertSame('/blog/{param1}', $withUrl);
+        $this->assertNull($plan['rule_only_route']);
     }
 
     public function testNonDeterministicWordPressRuleStillUsesUrlPath()
     {
-        // Participation of the optional capture still depends on the URL.
+        // Participation of the optional capture depends on the URL — the plan
+        // cache must not short-circuit this case to a precomputed shape.
         $absent = RouteNormalizer::normalizeFromWordPress('^([^/]+)(?:/([0-9]+))?/?$', 'simple');
         $present = RouteNormalizer::normalizeFromWordPress('^([^/]+)(?:/([0-9]+))?/?$', 'simple/123');
         $this->assertSame('/{param1}', $absent);
@@ -394,13 +376,53 @@ public function testNonDeterministicWordPressRuleStillUsesUrlPath()
 
     public function testWordPressRulePlanIsMemoized()
     {
-        // Same reference-equal plan should come back for the same rule, since
-        // the plan is cached in-process.
         $first = RouteNormalizer::wordPressRulePlan('^blog/([^/]+)/?$');
         $second = RouteNormalizer::wordPressRulePlan('^blog/([^/]+)/?$');
         $this->assertSame($first, $second);
     }
 
+    public function testWordPressCaptureAcceptingEmptyStringDependsOnUrl()
+    {
+        // ([^/]*) accepts an empty match: the normalized route differs per URL.
+        // A capture-presence shortcut purely from the rule would wrongly return
+        // the same route for both inputs.
+        $rule = '^normalized-cache-shape/?([^/]*)/?$';
+        $this->assertSame(
+            '/normalized-cache-shape',
+            RouteNormalizer::normalizeFromWordPress($rule, 'normalized-cache-shape/')
+        );
+        $this->assertSame(
+            '/normalized-cache-shape/{param1}',
+            RouteNormalizer::normalizeFromWordPress($rule, 'normalized-cache-shape/present/')
+        );
+    }
+
+    public function testWordPressEscapedLiteralInRuleKeepsCharacterInUrlMatchPath()
+    {
+        // The URL-matched path must preserve the literal '.' from the match,
+        // not drop it the way the rule-only fallback does.
+        $this->assertSame(
+            '/normalized-literal/file.json',
+            RouteNormalizer::normalizeFromWordPress(
+                '^normalized-literal/file\.json$',
+                'normalized-literal/file.json/'
+            )
+        );
+    }
+
+    public function testWordPressNamedCapturesPreserveNamesInUrlMatchPath()
+    {
+        // Named captures must be emitted with their declared names, not paramN,
+        // when the URL is provided.
+        $this->assertSame(
+            '/normalized-named-captures/{first+second}',
+            RouteNormalizer::normalizeFromWordPress(
+                '^normalized-named-captures/(?P<first>[^/]+)-(?P<second>[^/]+)/?$',
+                'normalized-named-captures/first-second/'
+            )
+        );
+    }
+
     public function testStaticPrefixLeadingTildePreservedWhenOptionalAbsent()
     {
         // F-04: rtrim — a leading special char like '~' must survive when the optional

From 087f79f16480104a921bd4f5a12f39ff538e4265 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 2 Oct 2026 15:57:20 +0200
Subject: [PATCH 52/54] Fix pipeline

---
 .../com/datadog/appsec/php/integration/Laminas33Tests.groovy    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
index 1b1f119fcb..bd4b39f4dc 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Laminas33Tests.groovy
@@ -81,7 +81,7 @@ class Laminas33Tests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 37
+        assert endpoints.size() == 44
         assert endpoints.find { it.path == '/' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /' } != null
         assert endpoints.find {
             it.path == '/application[/:action]' && it.method == '*' && it.operationName == 'http.request' && it.resourceName == '* /application[/:action]'

From 3c80bc17ea5fce177155ff120975ed0007b48219 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 2 Oct 2026 16:24:11 +0200
Subject: [PATCH 53/54] Fix wordpress

---
 .../wordpress-mu-plugins}/normalized-route-test.php        | 0
 tests/Frameworks/WordPress/Version_6_1/docker-init.sh      | 7 +++++++
 2 files changed, 7 insertions(+)
 rename {tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins => appsec/tests/integration/src/test/resources/wordpress-mu-plugins}/normalized-route-test.php (100%)

diff --git a/tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php b/appsec/tests/integration/src/test/resources/wordpress-mu-plugins/normalized-route-test.php
similarity index 100%
rename from tests/Frameworks/WordPress/Version_6_1/wp-content/mu-plugins/normalized-route-test.php
rename to appsec/tests/integration/src/test/resources/wordpress-mu-plugins/normalized-route-test.php
diff --git a/tests/Frameworks/WordPress/Version_6_1/docker-init.sh b/tests/Frameworks/WordPress/Version_6_1/docker-init.sh
index 9264c329fa..453ecf5309 100755
--- a/tests/Frameworks/WordPress/Version_6_1/docker-init.sh
+++ b/tests/Frameworks/WordPress/Version_6_1/docker-init.sh
@@ -9,6 +9,13 @@ export DD_TRACE_CLI_ENABLED=false
 # overlay mount.
 ln -sfn . /var/www/public
 
+# Appsec-only mu-plugins (route-normalization fixtures). Kept out of the
+# shared WordPress tree so the tracer's web_wordpress tests do not load
+# them and their extra callback spans do not change tracer snapshots.
+mkdir -p /var/www/wp-content/mu-plugins
+cp /project/appsec/tests/integration/src/test/resources/wordpress-mu-plugins/*.php \
+    /var/www/wp-content/mu-plugins/
+
 # Download WP-CLI for use by WordPressTests.groovy's @BeforeAll install step.
 curl -sf https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -o /usr/local/bin/wp
 chmod +x /usr/local/bin/wp

From 6648b6011954f0b3ce40619e2924937b89ab3a53 Mon Sep 17 00:00:00 2001
From: Alejandro Estringana Ruiz <alejandro.estringanaruiz@datadoghq.com>
Date: Fri, 2 Oct 2026 17:12:28 +0200
Subject: [PATCH 54/54] Amend tests

---
 .../com/datadog/appsec/php/integration/Symfony62Tests.groovy   | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
index 93aa09d2e7..57318a2df7 100644
--- a/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
+++ b/appsec/tests/integration/src/test/groovy/com/datadog/appsec/php/integration/Symfony62Tests.groovy
@@ -214,7 +214,7 @@ class Symfony62Tests {
             endpoints.size() > 0
         })
 
-        assert endpoints.size() == 17
+        assert endpoints.size() == 21
         assert endpoints.find { it.path == '/' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /' } != null
         assert endpoints.find { it.path == '/dynamic-path/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /dynamic-path/{param01}' } != null
         assert endpoints.find { it.path == '/caminho-dinamico/{param01}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /caminho-dinamico/{param01}' } != null
@@ -228,7 +228,6 @@ class Symfony62Tests {
         assert endpoints.find { it.path == '/telemetry' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /telemetry' } != null
         assert endpoints.find { it.path == '/lucky/number' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /lucky/number' } != null
         assert endpoints.find { it.path == '/lucky/fail' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /lucky/fail' } != null
-        assert endpoints.find { it.path == '/_error/{code}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /_error/{code}.{_format}' } != null
         assert endpoints.find { it.path == '/article/{slug}.{_format}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /article/{slug}.{_format}' } != null
         assert endpoints.find { it.path == '/café/{item}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /café/{item}' } != null
         assert endpoints.find { it.path == '/posts/{page}' && it.method == 'GET' && it.operationName == 'http.request' && it.resourceName == 'GET /posts/{page}' } != null