2 commits

Author	SHA1	Message	Date
tegwick	7031c97442	write-role-audit: report write-policy request times and orphan first_seen; check period is required ... The first live read (NK-WP-0058-T11) counted the attended 2026-11-04 evening logins because the incident default started at the window start. Times make the judgment checkable. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 943911@bnt-lap001 Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0	2026-11-05 16:53:54 +01:00
tegwick	c6199b8a6e	NK-WP-0058-T11: value-free OpenBao audit read for the executor write role, with synthetic-log tests ... write-role-audit.py reads the file audit log on stdin and reports each interval in which the write role existed, with logins, write-policy requests and failed kubernetes logins. The pilot's own login is the positive control. Receipt holds times, counts and SA names only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 943911@bnt-lap001 Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0	2026-11-05 14:45:32 +01:00