{
  "apply": {
    "field_manager": "ops-mason",
    "persisted_manifests": [
      "manifests/whitehat-plane/namespace.yaml",
      "manifests/whitehat-plane/network-policy.yaml",
      "manifests/whitehat-plane/service-account.yaml"
    ],
    "server_validated_manifests": [
      "manifests/whitehat-plane/namespace.yaml",
      "manifests/whitehat-plane/network-policy.yaml",
      "manifests/whitehat-plane/service-account.yaml"
    ]
  },
  "plan": {
    "approved_at": "2026-08-22",
    "approved_by": "Bernd Worsch",
    "id": "whitehat-foundational-plane"
  },
  "preflight": {
    "bundle_digest": "9636f48f0b994118ff60a8c014e0099486945d66a2b3d3582dc57a09862b2035",
    "bundle_id": "whitehat-foundational-plane",
    "client_validated_manifests": [
      "manifests/whitehat-plane/namespace.yaml",
      "manifests/whitehat-plane/network-policy.yaml",
      "manifests/whitehat-plane/service-account.yaml"
    ],
    "context": "default",
    "deferred_server_validation": [
      "manifests/whitehat-plane/network-policy.yaml",
      "manifests/whitehat-plane/service-account.yaml"
    ],
    "dependencies": [
      {
        "assertions": {
          "/spec/ports/0/port": 8080
        },
        "name": "audit-core",
        "namespace": "audit-core",
        "resource": "services"
      },
      {
        "assertions": {
          "/spec/ingress/0/from/0/namespaceSelector/matchLabels/kubernetes.io~1metadata.name": "whitehat",
          "/spec/ingress/0/from/0/podSelector/matchLabels/whitehat.security~1plane": "true",
          "/spec/ingress/0/from/0/podSelector/matchLabels/whitehat.security~1target": "audit-core",
          "/spec/ingress/0/ports/0/port": 8080
        },
        "name": "audit-core-whitehat-ingress",
        "namespace": "audit-core",
        "resource": "networkpolicies.networking.k8s.io"
      }
    ],
    "objects": [
      {
        "object": "Namespace/whitehat",
        "state": "absent"
      },
      {
        "object": "NetworkPolicy/whitehat/default-deny",
        "state": "absent"
      },
      {
        "object": "NetworkPolicy/whitehat/allow-audit-core-e2",
        "state": "absent"
      },
      {
        "object": "ServiceAccount/whitehat/whitehat-runner",
        "state": "absent"
      }
    ],
    "ok": true,
    "plan_approved": true,
    "plan_id": "whitehat-foundational-plane",
    "server_validated_manifests": [
      "manifests/whitehat-plane/namespace.yaml"
    ]
  },
  "recorded_at": "2026-08-22T09:24:44.407612+00:00",
  "rollback": {
    "bundle_id": "whitehat-foundational-plane",
    "conditional_namespace_commands": [
      "kubectl delete namespaces whitehat"
    ],
    "inventory_before_namespace_delete": [
      "kubectl -n whitehat get all,configmaps,secrets,serviceaccounts,networkpolicies"
    ],
    "object_scoped_commands": [
      "kubectl -n whitehat delete networkpolicies.networking.k8s.io default-deny",
      "kubectl -n whitehat delete networkpolicies.networking.k8s.io allow-audit-core-e2",
      "kubectl -n whitehat delete serviceaccounts whitehat-runner"
    ],
    "warning": "Delete the namespace only after proving it contains no later or unrelated objects."
  },
  "schema_version": "ops-mason.kubernetes-plane-evidence/v1",
  "source": {
    "implementation_revision": "95129d7a35c8999be359b163b554853c9c6afa3a",
    "repo": "whitehat-security",
    "revision": "4882c2d47a826a305d5c4e05aa7fcc1252c3887e"
  },
  "verification": {
    "bundle_digest": "9636f48f0b994118ff60a8c014e0099486945d66a2b3d3582dc57a09862b2035",
    "bundle_id": "whitehat-foundational-plane",
    "context": "default",
    "negative_scope": {
      "pods": 0,
      "secrets": 0
    },
    "objects": [
      {
        "generation": null,
        "object": "Namespace/whitehat",
        "resource_version": "50841574",
        "uid": "b0f97761-28a2-4b50-b4cb-890995fc0993"
      },
      {
        "generation": 1,
        "object": "NetworkPolicy/whitehat/default-deny",
        "resource_version": "50841577",
        "uid": "f4143fc9-4e42-454e-867b-c3fe5a050945"
      },
      {
        "generation": 1,
        "object": "NetworkPolicy/whitehat/allow-audit-core-e2",
        "resource_version": "50841578",
        "uid": "84ba88a8-74df-448d-b9ba-066083c49b0f"
      },
      {
        "generation": null,
        "object": "ServiceAccount/whitehat/whitehat-runner",
        "resource_version": "50841583",
        "uid": "6229deb0-82b8-4ca7-aee5-e00b4eff81a9"
      }
    ],
    "ok": true
  }
}