drop gcp secret manager audit export · parse secret version + accessor + iam principal · runs locally
drop gcp secret manager audit export · local only
heuristic screener · vendor schema varies · not definitive proof