NK-WP-0054-T05: synthetic bind-split rehearsal on pinned LLDAP (phase 1 of 4)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 308701@bnt-lap001
Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56

docs/evidence/2026-10-28-nk54-bind-split-rehearsal/synthetic-rehearsal.json

@@ -0,0 +1,62 @@
+{
+  "data": "synthetic",
+  "findings": {
+    "admin_after_switch": {
+      "can_create_user": true,
+      "groups": [
+        "lldap_admin"
+      ],
+      "login_with_unchanged_password": true
+    },
+    "cleanup": true,
+    "ld_admin_introduced": {
+      "can_create_group": true,
+      "groups": [
+        "lldap_admin"
+      ],
+      "login": true
+    },
+    "provisioner_password_manager": {
+      "can_add_group_member": false,
+      "can_create_user": false,
+      "can_set_user_password": true,
+      "login": true,
+      "refused_admin_password": true,
+      "users_group_id_known": true
+    },
+    "read_only_binds": {
+      "svc-authelia": {
+        "bind": true,
+        "groups_visible": 6,
+        "people_visible": 8,
+        "sees_alice": true,
+        "write_refused": true
+      },
+      "svc-keycape": {
+        "bind": true,
+        "groups_visible": 6,
+        "people_visible": 8,
+        "sees_alice": true,
+        "write_refused": true
+      },
+      "svc-privacyidea": {
+        "bind": true,
+        "groups_visible": 6,
+        "people_visible": 8,
+        "sees_alice": true,
+        "write_refused": true
+      }
+    },
+    "si3_interactive_login": {
+      "svc-authelia": true,
+      "svc-keycape": true,
+      "svc-privacyidea": true
+    }
+  },
+  "image": "docker.io/lldap/lldap@sha256:9e605a66c02514bfcffd1b67cafb1e98d50992216bb2871d7ae44622047dd09d",
+  "observed_at": "2026-10-28T17:59:22.643767+00:00",
+  "production_contacted": false,
+  "schema": "netkingdom.lldap-bind-split-rehearsal.v1",
+  "task": "NK-WP-0054-T05",
+  "values_recorded": false
+}