OperTraitor identifies Kubernetes operator privilege-escalation risks by comparing documented functions with their actual RBAC permissions.