Evidence search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Group RBAC grants by what they yield, not by verb. Then close the nodes/proxy exec path with v1.36 fine-grained kubelet permissions, narrow impersonation, and prove each removal with a negative test.