@@ -269,6 +269,48 @@ mod session {
         }
     }
 
+    /// OTLP collector request headers, such as an authorization token, in
+    /// the `OTEL_EXPORTER_OTLP_HEADERS` format. Redacted from diagnostics and
+    /// cleared on drop.
+    #[derive(Clone)]
+    pub struct SecretOtlpHeaders(Zeroizing<String>);
+
+    impl SecretOtlpHeaders {
+        #[must_use]
+        pub fn new(value: String) -> Self {
+            Self(Zeroizing::new(value))
+        }
+
+        #[must_use]
+        pub fn expose_secret(&self) -> &str {
+            &self.0
+        }
+    }
+
+    impl fmt::Debug for SecretOtlpHeaders {
+        fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+            formatter.write_str("SecretOtlpHeaders([REDACTED])")
+        }
+    }
+
+    impl Serialize for SecretOtlpHeaders {
+        fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
+        where
+            S: serde::Serializer,
+        {
+            serializer.serialize_str(self.expose_secret())
+        }
+    }
+
+    impl<'de> Deserialize<'de> for SecretOtlpHeaders {
+        fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
+        where
+            D: serde::Deserializer<'de>,
+        {
+            String::deserialize(deserializer).map(Self::new)
+        }
+    }
+
     /// Trusted launch input delivered only to `openshell-supervisor`.
     #[derive(Clone, Serialize, Deserialize)]
     #[serde(deny_unknown_fields)]
@@ -287,6 +329,10 @@ mod session {
         /// Never delivered to the workload. Missing only in older bundles.
         #[serde(default, skip_serializing_if = "Option::is_none")]
         pub ssh_host_private_key: Option<SecretSshHostKey>,
+        /// Headers for the OCSF OTLP collector, present only when the gateway
+        /// has them. Never delivered to the workload.
+        #[serde(default, skip_serializing_if = "Option::is_none")]
+        pub ocsf_otlp_headers: Option<SecretOtlpHeaders>,
     }
 
     /// Gateway-created authentication input trusted by a compute driver.
@@ -373,6 +419,7 @@ mod session {
                 .field("sandbox_token", &"[REDACTED]")
                 .field("sandbox_expires_at", &self.sandbox_expires_at)
                 .field("ssh_host_private_key", &self.ssh_host_private_key)
+                .field("ocsf_otlp_headers", &self.ocsf_otlp_headers)
                 .finish()
         }
     }
@@ -1080,6 +1127,7 @@ mod tests {
                 sandbox_token: pair.sandbox.token,
                 sandbox_expires_at: pair.sandbox.expires_at,
                 ssh_host_private_key: None,
+                ocsf_otlp_headers: None,
             };
             bundle.validate().expect("non-expiring auth bundle");
         }
@@ -1109,6 +1157,9 @@ mod tests {
                 ssh_host_private_key: Some(SecretSshHostKey::new(
                     "private-ssh-host-key".to_string(),
                 )),
+                ocsf_otlp_headers: Some(SecretOtlpHeaders::new(
+                    "authorization=collector-token".to_string(),
+                )),
             };
 
             let encoded = serde_json::to_vec(&bundle).expect("serialize auth bundle");
@@ -1128,18 +1179,23 @@ mod tests {
             assert!(!debug.contains(bundle.gateway_token.expose_secret()));
             assert!(!debug.contains(bundle.sandbox_token.expose_secret()));
             assert!(!debug.contains("private-ssh-host-key"));
-            assert_eq!(debug.matches("[REDACTED]").count(), 3);
+            assert!(!debug.contains("collector-token"));
+            assert_eq!(debug.matches("[REDACTED]").count(), 4);
             assert_eq!(
                 decoded.ssh_host_private_key.unwrap().expose_secret(),
                 "private-ssh-host-key"
             );
+            assert_eq!(
+                decoded.ocsf_otlp_headers.unwrap().expose_secret(),
+                "authorization=collector-token"
+            );
             let mut legacy = serde_json::to_value(&bundle).unwrap();
-            legacy
-                .as_object_mut()
-                .unwrap()
-                .remove("ssh_host_private_key");
+            let fields = legacy.as_object_mut().unwrap();
+            fields.remove("ssh_host_private_key");
+            fields.remove("ocsf_otlp_headers");
             let legacy: SupervisorAuthBundle = serde_json::from_value(legacy).unwrap();
             assert!(legacy.ssh_host_private_key.is_none());
+            assert!(legacy.ocsf_otlp_headers.is_none());
         }
 
         #[derive(Serialize)]
 
@@ -29,6 +29,36 @@ pub const LOG_LEVEL: &str = "OPENSHELL_LOG_LEVEL";
 /// OTLP/gRPC collector endpoint for supervisor trace export.
 pub const OTLP_ENDPOINT: &str = "OPENSHELL_OTLP_ENDPOINT";
 
+/// OTLP/gRPC collector endpoint for supervisor OCSF event export.
+pub const OTLP_OCSF_ENDPOINT: &str = "OPENSHELL_OTLP_OCSF_ENDPOINT";
+
+/// OCSF schema version that supervisors downgrade exported events to.
+pub const OTLP_OCSF_SCHEMA_VERSION: &str = "OPENSHELL_OTLP_OCSF_SCHEMA_VERSION";
+
+/// Name of the gateway that launched the sandbox, reported as
+/// `openshell.gateway.name` on supervisor telemetry.
+pub const GATEWAY_NAME: &str = "OPENSHELL_GATEWAY_NAME";
+
+/// OCSF event export that a compute driver passes to its supervisors.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct OcsfOtlpExport {
+    pub endpoint: String,
+    pub schema_version: Option<String>,
+}
+
+impl OcsfOtlpExport {
+    /// The supervisor environment variables for this export.
+    pub fn environment(&self) -> Vec<(&'static str, String)> {
+        std::iter::once((OTLP_OCSF_ENDPOINT, self.endpoint.clone()))
+            .chain(
+                self.schema_version
+                    .clone()
+                    .map(|version| (OTLP_OCSF_SCHEMA_VERSION, version)),
+            )
+            .collect()
+    }
+}
+
 /// Versioned specification for the exact canonical main process.
 ///
 /// Most drivers use JSON directly. Transports that cannot preserve spaces in
@@ -278,6 +308,26 @@ pub const OCI_IMAGE_USER: &str = "OPENSHELL_OCI_IMAGE_USER";
 mod tests {
     use super::*;
 
+    #[test]
+    fn ocsf_export_environment_carries_the_schema_version_only_when_set() {
+        let mut export = OcsfOtlpExport {
+            endpoint: "http://siem:4317".into(),
+            schema_version: None,
+        };
+        assert_eq!(
+            export.environment(),
+            [(OTLP_OCSF_ENDPOINT, "http://siem:4317".to_string())]
+        );
+        export.schema_version = Some("1.3".into());
+        assert_eq!(
+            export.environment(),
+            [
+                (OTLP_OCSF_ENDPOINT, "http://siem:4317".to_string()),
+                (OTLP_OCSF_SCHEMA_VERSION, "1.3".to_string()),
+            ]
+        );
+    }
+
     #[test]
     fn main_process_transport_preserves_argument_boundaries() {
         let spec = crate::proto::compute::v1::DriverSandboxSpec {
 
@@ -185,6 +185,16 @@ pub struct DockerComputeConfig {
     #[serde(skip)]
     pub supervisor_otlp_endpoint: Option<String>,
 
+    /// OCSF event export passed to supervisors. The gateway supplies its own
+    /// export; driver TOML cannot set it.
+    #[serde(skip)]
+    pub supervisor_ocsf_export: Option<openshell_core::sandbox_env::OcsfOtlpExport>,
+
+    /// Gateway name passed to supervisors for their telemetry. The gateway
+    /// supplies its own name; driver TOML cannot set it.
+    #[serde(skip)]
+    pub supervisor_gateway_name: Option<String>,
+
     /// Image containing the trusted `openshell-sandbox` binary.
     pub sandbox_runtime_image: Option<String>,
 
@@ -284,6 +294,8 @@ impl Default for DockerComputeConfig {
             sandbox_label: "default".to_string(),
             grpc_endpoint: String::new(),
             supervisor_otlp_endpoint: None,
+            supervisor_ocsf_export: None,
+            supervisor_gateway_name: None,
             sandbox_runtime_image: None,
             supervisor_bin: None,
             supervisor_image: None,
@@ -319,6 +331,8 @@ struct DockerDriverRuntimeConfig {
     supervisor_image_id: String,
     supervisor_grpc_endpoint: String,
     supervisor_otlp_endpoint: Option<String>,
+    supervisor_ocsf_export: Option<openshell_core::sandbox_env::OcsfOtlpExport>,
+    supervisor_gateway_name: Option<String>,
     ssh_socket_path: String,
     guest_tls: Option<DockerGuestTlsPaths>,
     gpu: DockerGpuRuntimeCapabilities,
@@ -949,6 +963,8 @@ impl DockerComputeDriver {
                 supervisor_image_id,
                 supervisor_grpc_endpoint,
                 supervisor_otlp_endpoint: docker_config.supervisor_otlp_endpoint.clone(),
+                supervisor_ocsf_export: docker_config.supervisor_ocsf_export.clone(),
+                supervisor_gateway_name: docker_config.supervisor_gateway_name.clone(),
                 ssh_socket_path: docker_config.ssh_socket_path.clone(),
                 guest_tls,
                 gpu,
@@ -5103,7 +5119,7 @@ async fn spawn_docker_control_process(
             openshell_core::telemetry::enabled_env_value()
         ),
     ];
-    environment.extend(supervisor_tracing_environment(config));
+    environment.extend(supervisor_otlp_environment(config));
     if config.guest_tls.is_some() {
         environment.push(format!(
             "{}={SUPERVISOR_STATE_MOUNT_PATH}/tls/ca.pem",
@@ -5634,13 +5650,24 @@ fn docker_child_environment(sandbox: &DriverSandbox) -> HashMap<String, String>
     environment
 }
 
-/// Environment that lets the supervisor export spans and join the current trace.
-fn supervisor_tracing_environment(config: &DockerDriverRuntimeConfig) -> Vec<String> {
-    let Some(endpoint) = &config.supervisor_otlp_endpoint else {
-        return Vec::new();
-    };
-    std::iter::once((openshell_core::sandbox_env::OTLP_ENDPOINT, endpoint.clone()))
-        .chain(openshell_otel::current_trace_context_environment())
+/// Environment that lets the supervisor export spans, joining the current
+/// trace, and OCSF events, identifying the gateway that launched it.
+fn supervisor_otlp_environment(config: &DockerDriverRuntimeConfig) -> Vec<String> {
+    let traces = config.supervisor_otlp_endpoint.iter().flat_map(|endpoint| {
+        std::iter::once((openshell_core::sandbox_env::OTLP_ENDPOINT, endpoint.clone()))
+            .chain(openshell_otel::current_trace_context_environment())
+    });
+    let ocsf = config
+        .supervisor_ocsf_export
+        .iter()
+        .flat_map(openshell_core::sandbox_env::OcsfOtlpExport::environment);
+    let gateway_name = config
+        .supervisor_gateway_name
+        .iter()
+        .map(|name| (openshell_core::sandbox_env::GATEWAY_NAME, name.clone()));
+    traces
+        .chain(ocsf)
+        .chain(gateway_name)
         .map(|(name, value)| format!("{name}={value}"))
         .collect()
 }
 
@@ -47,6 +47,18 @@ struct Args {
     #[arg(long, env = "OPENSHELL_OTLP_ENDPOINT")]
     otlp_endpoint: Option<String>,
 
+    /// OTLP/gRPC collector endpoint for supervisor OCSF event export.
+    #[arg(long, env = "OPENSHELL_OTLP_OCSF_ENDPOINT")]
+    otlp_ocsf_endpoint: Option<String>,
+
+    /// OCSF schema version that supervisors downgrade exported events to.
+    #[arg(
+        long,
+        env = "OPENSHELL_OTLP_OCSF_SCHEMA_VERSION",
+        requires = "otlp_ocsf_endpoint"
+    )]
+    otlp_ocsf_schema_version: Option<String>,
+
     #[arg(long, env = "OPENSHELL_GATEWAY_NAME")]
     gateway_name: Option<String>,
 }
@@ -78,6 +90,13 @@ async fn main() -> Result<()> {
         docker_config.supervisor_image = Some(image);
     }
     docker_config.supervisor_otlp_endpoint = args.otlp_endpoint.clone();
+    docker_config.supervisor_gateway_name = args.gateway_name.clone();
+    docker_config.supervisor_ocsf_export = args.otlp_ocsf_endpoint.clone().map(|endpoint| {
+        openshell_core::sandbox_env::OcsfOtlpExport {
+            endpoint,
+            schema_version: args.otlp_ocsf_schema_version.clone(),
+        }
+    });
     let driver = DockerComputeDriver::new(args.gateway_bind, &args.log_level, &docker_config)
         .await
         .into_diagnostic()?;
 
@@ -64,6 +64,7 @@ fn test_launch_authentication() -> Vec<u8> {
             sandbox_token: SecretJwt::parse("sandbox.token.value").unwrap(),
             sandbox_expires_at: i64::MAX,
             ssh_host_private_key: None,
+            ocsf_otlp_headers: None,
         },
         gateway_id: "gateway-test".to_string(),
         verification_keys: vec![SessionVerificationKey {
@@ -212,6 +213,8 @@ fn runtime_config() -> DockerDriverRuntimeConfig {
         supervisor_image_id: "sha256:supervisor-test".to_string(),
         supervisor_grpc_endpoint: "https://host.openshell.internal:8443".to_string(),
         supervisor_otlp_endpoint: None,
+        supervisor_ocsf_export: None,
+        supervisor_gateway_name: None,
         ssh_socket_path: openshell_core::container_paths::SSH_SOCKET_PATH.to_string(),
         guest_tls: Some(DockerGuestTlsPaths {
             ca: PathBuf::from("/tmp/ca.crt"),
@@ -1392,17 +1395,37 @@ fn docker_child_environment_strips_supervisor_control_keys() {
 }
 
 #[test]
-fn supervisor_tracing_environment_requires_an_endpoint() {
+fn supervisor_otlp_environment_carries_only_configured_signals() {
+    use openshell_core::sandbox_env::{
+        GATEWAY_NAME, OTLP_ENDPOINT, OTLP_OCSF_ENDPOINT, OTLP_OCSF_SCHEMA_VERSION, OcsfOtlpExport,
+    };
+
     let mut config = runtime_config();
-    assert!(supervisor_tracing_environment(&config).is_empty());
+    assert!(supervisor_otlp_environment(&config).is_empty());
 
     config.supervisor_otlp_endpoint = Some("http://127.0.0.1:4317".to_string());
     assert_eq!(
-        supervisor_tracing_environment(&config),
-        [format!(
-            "{}=http://127.0.0.1:4317",
-            openshell_core::sandbox_env::OTLP_ENDPOINT
-        )]
+        supervisor_otlp_environment(&config),
+        [format!("{OTLP_ENDPOINT}=http://127.0.0.1:4317")]
+    );
+
+    config.supervisor_otlp_endpoint = None;
+    config.supervisor_ocsf_export = Some(OcsfOtlpExport {
+        endpoint: "http://siem:4317".to_string(),
+        schema_version: Some("1.3".to_string()),
+    });
+    assert_eq!(
+        supervisor_otlp_environment(&config),
+        [
+            format!("{OTLP_OCSF_ENDPOINT}=http://siem:4317"),
+            format!("{OTLP_OCSF_SCHEMA_VERSION}=1.3"),
+        ]
+    );
+
+    config.supervisor_gateway_name = Some("prod-west".to_string());
+    assert_eq!(
+        supervisor_otlp_environment(&config).last(),
+        Some(&format!("{GATEWAY_NAME}=prod-west"))
     );
 }
 
 
@@ -248,6 +248,15 @@ pub struct KubernetesComputeConfig {
     /// supplies its own export endpoint; driver TOML cannot set it.
     #[serde(skip)]
     pub supervisor_otlp_endpoint: Option<String>,
+    /// OCSF event export passed to supervisors. The gateway supplies its own
+    /// export; driver TOML cannot set it.
+    #[serde(skip)]
+    pub supervisor_ocsf_export: Option<openshell_core::sandbox_env::OcsfOtlpExport>,
+
+    /// Gateway name passed to supervisors for their telemetry. The gateway
+    /// supplies its own name; driver TOML cannot set it.
+    #[serde(skip)]
+    pub supervisor_gateway_name: Option<String>,
     pub ssh_socket_path: String,
     pub client_tls_secret_name: String,
     pub host_gateway_ip: String,
@@ -370,6 +379,8 @@ impl Default for KubernetesComputeConfig {
             proxy_ca_bundle: None,
             grpc_endpoint: String::new(),
             supervisor_otlp_endpoint: None,
+            supervisor_ocsf_export: None,
+            supervisor_gateway_name: None,
             ssh_socket_path: openshell_core::container_paths::SSH_SOCKET_PATH.to_string(),
             client_tls_secret_name: String::new(),
             host_gateway_ip: String::new(),