Definitions · N · Evidence & audit
NHIM audit
NHIM audit is a static Kubernetes cluster scan (`nhim-audit` CLI) that inventories agent workloads, egress paths, and sidecar coverage before Blekline deploy. Output JSON feeds the deployment hub posture upload.
NHIM audit is a static Kubernetes inventory scan run via the open-source nhim-audit CLI. It produces JSON describing agent workloads, egress paths, sidecar coverage, and mandatory-hop gaps — without mutating the cluster.
Output
- Upload JSON to
/operations/postureor during platform eval onboarding. - Feeds deployment hub gap list and committee forwarding pack.
- Optional CI gate: CI NHIM gate.
Not the same as
- NHIM pentest — program gate, not yet complete (see operator runbook).
- Runtime enforcement — audit is pre-deploy static analysis; sidecar is runtime.
In Blekline
- Quickstart: /docs/get-started/nhim-audit-quickstart
- Package:
@blekline/nhim-audit(OSS)