Per-device block logs in the admin dashboard

When an app breaks I have no idea which blocked domain caused it. A live query log per device — even just the last hour — would make whitelisting quick instead of guesswork. This is my single biggest ask.