NK-WP-0058-T11: value-free OpenBao audit read for the executor write role, with synthetic-log tests

write-role-audit.py reads the file audit log on stdin and reports each interval in which
the write role existed, with logins, write-policy requests and failed kubernetes logins.
The pilot's own login is the positive control. Receipt holds times, counts and SA names only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 943911@bnt-lap001
Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0
This commit is contained in:
tegwick 2026-11-05 14:45:32 +01:00
parent a591262e51
commit c6199b8a6e
5 changed files with 294 additions and 9 deletions

View file

@ -149,7 +149,7 @@ Mark the duplicated pieces, for example the two seeders and the two Secret names
```task
id: NK-WP-0058-T10
status: todo
status: progress
priority: high
assignee: claude-code
depends_on: [NK-WP-0058-T01]
@ -169,7 +169,7 @@ founder for on 2026-11-04/05 (the input for T05).
```task
id: NK-WP-0058-T02
status: todo
status: progress
priority: high
assignee: claude-code
depends_on: [NK-WP-0058-T01, NK-WP-0058-T09, NK-WP-0058-T10]
@ -287,7 +287,7 @@ to ask the founder for on 2026-11-04/05 is then readable, or explicitly founder-
```task
id: NK-WP-0058-T06
status: todo
status: progress
priority: medium
assignee: claude-code
depends_on: [NK-WP-0058-T09]
@ -309,7 +309,7 @@ The open check from 2026-11-05 on the overnight window is T11.
```task
id: NK-WP-0058-T07
status: todo
status: progress
priority: medium
assignee: claude-code
state_hub_task_id: "a99424ed-ee8b-5db4-9fa7-2ae5fc32c39c"