misconfigurations:
  - id: KSV-0041
    paths:
      - deploy/clusterrole.yaml
    expired_at: 2026-05-22
    statement: Soteria copies restic credentials into target namespaces for backup Jobs; replace with a narrower per-namespace secret distribution model.