Vouch request: Hadar301

[Hadar301]

What do you want to work on?

I want to fix issue #4233

Why this change?

I deploy OpenShell with SPIFFE-based provider grants. Its audit events show the provider, destination, and grant result, but not which authenticated sandbox identity made the request.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md