Picture this. It’s 2 a.m., something is broken in production, and the only way to diagnose it is kubectl exec into a pod and poke around. You open the VPN, hop through a bastion, join a Teleport session, and hope your audit logs catch everything. Teams that rely