#1174 Santa: reports (ready for lockdown, top blocked, rule coverage) Issue created by javuto Part of Santa/Workshop parity, building on the Santa sync server from #1142 (

pkg/santa

,

osctrl-tls

sync endpoint, Santa page in the UI). Problem Operators need to know when an environment or machine is safe to move to LOCKDOWN. Scope • Ready for lockdown: machines in MONITOR with no would-block events in the last N days. • Top blocked binaries / team IDs over a period. • Rule coverage gaps: frequently executed binaries not covered by any allow rule. • Computed from `santa_events`; keep queries bounded and indexed. Acceptance • Reports render for an environment with thousands of events within normal page latency. jmpsec/osctrl