An engineer joins a 3 a.m. incident call, bleary-eyed, SSHs into a node, and runs one command too many. Logs vanish, metrics skew, and suddenly the “quick fix” becomes a postmortem headline. That is why teams now talk seriously about fine-grained command approvals and kubectl command restrictions. They are