NK-WP-0054-T05 phase 2c: Authelia refuses svc-* and ld-admin sign-in; synthetic check

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 308701@bnt-lap001
Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56

docs/evidence/2026-10-28-nk54-bind-split-rehearsal/synthetic-authelia-filter.json

@@ -0,0 +1,27 @@
+{
+  "data": "synthetic",
+  "findings": {
+    "bind_user": "uid=svc-authelia,ou=people,dc=netkingdom,dc=local",
+    "previous_filter": {
+      "human": 200,
+      "human_wrong_password": 401,
+      "ld-admin": 200,
+      "svc-keycape": 200,
+      "svc-privacyidea": 200
+    },
+    "repository_filter": {
+      "human": 200,
+      "human_wrong_password": 401,
+      "ld-admin": 401,
+      "svc-keycape": 401,
+      "svc-privacyidea": 401
+    }
+  },
+  "image": "docker.io/lldap/lldap@sha256:9e605a66c02514bfcffd1b67cafb1e98d50992216bb2871d7ae44622047dd09d",
+  "observed_at": "2026-10-29T20:52:19.793834+00:00",
+  "production_contacted": false,
+  "schema": "netkingdom.lldap-bind-split-rehearsal.v1",
+  "stage": "authelia",
+  "task": "NK-WP-0054-T05",
+  "values_recorded": false
+}