Posts tagged: audit
Unsigned Terminals: What Auditors Actually Fear (and What PSM Does Instead)
A terminal produces claims, not proof. What cryptographic signing actually guarantees in 60 seconds, and how privileged session management delivers the same trilogy by process instead of math.
I Built a PAM Audit CLI to Learn Identity the Hard Way
idira-audit-clj is a zero-dependency Babashka CLI that audits privileged estates for orphaned accounts, dormant privilege, and stale tokens — built AI-assisted, disclosed honestly, tested deterministically.
Security Audit Report — June 2026
Comprehensive security and leakage scan across all 18 GitHub repositories using pdpa-sg-clj, OWASP tools, trufflehog, detect-secrets, npm audit, safety, and pip-audit.