net-kingdom/tools/service-binds
tegwick c6199b8a6e NK-WP-0058-T11: value-free OpenBao audit read for the executor write role, with synthetic-log tests
write-role-audit.py reads the file audit log on stdin and reports each interval in which
the write role existed, with logins, write-policy requests and failed kubernetes logins.
The pilot's own login is the positive control. Receipt holds times, counts and SA names only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 943911@bnt-lap001
Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0
2026-11-05 14:45:32 +01:00
..
bind-lane.py NK-WP-0056-T04: svc-privacyidea lane in OpenBao custody with attended write-through 2026-10-31 11:06:53 +01:00
executor-lanes.py NK-WP-0056-T06 prep: admission helper, write-role window-open/close, service-client case; T15 evidence 2026-11-04 01:49:40 +01:00
write-role-audit.py NK-WP-0058-T11: value-free OpenBao audit read for the executor write role, with synthetic-log tests 2026-11-05 14:45:32 +01:00