#opa

AI agents now open PRs and run deploys inside your pipeline. Here is how to govern their tool access

TL;DR: I wired Infracost into terraform plan, fed the JSON into OPA via conftest, and made the PR...

Every time I set up a stack from scratch I'd end up touching at least four files: docker-compose.yml,...

How I built a manifest-driven deployment CLI that writes its own infrastructure, gates every deploy/promote through OPA policy, instruments traffic in Prometheus format, and produces a full audit trail — all from one hand-edited file.

OPA is excellent infrastructure policy. But AI governance requires semantic understanding, organizational context, and session-aware evaluation that a pattern-matching engine was never designed to handle. Here's where Rego breaks down — and what the alternative looks like.

How I built a manifest-driven CLI that generates its own infrastructure, enforces...

Your cloud account has Service Control Policies. Your Terraform pipelines have compliance checks....

I split out an interop-focused repo to continuously validate opa-authzen-plugin against OpenID AuthZEN Interop. This post covers the background, ecosystem context, current gaps, and next actions.

Step-by-step guide to building and deploying a custom Gatekeeper policy that blocks workloads from being created in the Kubernetes default namespace.

Building an OPA plugin that implements the AuthZEN Authorization API 1.0. How the OPA community discussion led to a plugin approach, and the design decisions behind it.

Learn how to implement Policy as Code with OPA for secure and compliant Kubernetes environments, enforce security policies and ensure compliance

We talk about "Security-as-Code," but most teams are still just "Security-by-Manual-Checklist." Here...