tegwick 9c73a5fa09 NK-WP-0058-T05: proposal for a read-only agent status grant (not applied), with guard tests ... Dedicated ServiceAccount sso/nk-agent-status (SI-14), read-only Jobs/pods/Deployments/ExternalSecrets in sso, one named ConfigMap in informed-decision and one Argo Application; no Secrets, logs or exec. Options A-D for the founder decision; tests keep the grant narrow and sso workloads free of literal secrets. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 943911@bnt-lap001 Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0		2026-11-06 00:52:35 +01:00
..
tests	NK-WP-0058-T05: proposal for a read-only agent status grant (not applied), with guard tests	2026-11-06 00:52:35 +01:00
fetch_owners.py	NK-WP-0058-T02 step 1: owner source in CI, contract workflow, suite fails on any skip	2026-11-05 23:58:16 +01:00
oci_extract.py	NK-WP-0058-T02 step 2: T15 and T19 exercises run in the contract CI	2026-11-06 00:13:26 +01:00
requirements.txt	NK-WP-0058-T02 step 2: T15 and T19 exercises run in the contract CI	2026-11-06 00:13:26 +01:00
run.sh	NK-WP-0058-T07: conventions lint, server-side applies, one cluster route	2026-11-06 00:34:00 +01:00