Add CARING Kubernetes RBAC benchmark

README.md

@@ -99,3 +99,11 @@ current scope, future scope, consumer purposes, review decisions, evidence,
 source observations, utility relationships, scope freshness, and SCOPE.md as an
 interface profile. The pack is intended to seed the consumer-side repo-scoping
 workplan while keeping proposed canon extensions reviewable.
+
+## Benchmarks
+
+CARING benchmark assets live under `infospace/standards/caring/benchmarks/`.
+The first benchmark is `kubernetes-rbac`, which maps Kubernetes RBAC native
+constructs into CARING descriptors and records canon pressure around native
+roles, effective access, derived workload capabilities, induced secret exposure,
+and the rule that a Namespace is not automatically a tenant boundary.