[sjy]

> So, does the defense get to subpoena the logs, and depose a programmer to explain why some random request returned a 502?

In theory yes, but you can get some idea of how it worked in practice from the transcript of the trial of Seema Misra [1]. This was one of the few cases where the postmaster pleaded not guilty and expert evidence was presented to the jury. The defence complained throughout the trial that their expert did not have adequate access to the underlying computer records. New documents were identified during the course of the trial, and the defence applied unsuccessfully for the trial to be stayed at the close of the prosecution case.

[1]: https://journals.sas.ac.uk/deeslr/article/view/2217/2151