palarran-security-infrastructure

原文涵盖的主题

• Infrastructure security audit

Invocation: /palarran:security:infrastructure {scope} [--plan]. Read the profile guide, primary-source register, shared audit contract, global memory and decision memory before work. These documents are mandatory context, not optional follow-up reading. 1. Identify the target repository/environment, subject revision and requested boundaries. Read its AGENTS, .palarran/INDEX.md, accepted decisions and language preferences. Reuse relevant permitted local evidence; no new remote memory call is implied by this audit. Record missing evidence without installing or repairing anything. 2. Set the actual scope. Default: read local source/IaC/manifests and existing sanitized evidence, then write audit artifacts only. --plan: produce the evidence/inspection plan without commands, SSH, target/provider calls, remote refresh, scanning or tests. Live read-only inspection requires existing authorization naming target, environment, allowed reader role and exact read scope. If that scope is absent, continue locally and mark runtime rows NOTRUN; do not collect login passwords or elevate privileges automatically. 3. Map human/CI/workload identities and control plane, ingress, management, storage, back

这里只展示节选，请以完整原文和当前要求为准。