Add exact audit E2 probe pod

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0260c-4067-7052-9647-ad000d576e38
This commit is contained in:
tegwick 2026-08-22 00:11:06 +02:00
parent 6ba6929b8e
commit ce5bb78990
2 changed files with 48 additions and 1 deletions

View file

@ -16,7 +16,7 @@
"control_plane_scope": [
"GET apps/v1 deployment audit-core/audit-core for target revision only",
"GET v1 service audit-core/audit-core for target identity only",
"CREATE/GET/DELETE v1 pod user-engine/whitehat-e2-audit only",
"CREATE/GET/EXEC/DELETE v1 pod user-engine/whitehat-e2-audit only; EXEC may stream runners/audit_core_e2.py to python3 stdin and invoke no other program",
"mount but never GET v1 secret user-engine/whitehat-e2-audit-credentials provisioned by the custody owner",
"GET pod log user-engine/whitehat-e2-audit only"
],