It starts with a 2 a.m. pager alert. A cluster is flaring up, but only one engineer is awake. They log in with admin rights, grab kubectl, and fix the issue. The crisis ends, but security takes a hit. In that moment, command-level accountability vanished. This is why Kubernetes