Policy-as-code sandbox

Policies fail in production mostly because they were never exercised against realistic manifests.

Make writing a policy test as cheap as writing the policy itself.

A disposable local cluster plus a corpus of real-world manifests, with each policy shipping its own allow and deny fixtures.

Placeholder — implementation notes pending.

Placeholder — findings pending.

Measure how many production policy incidents the fixture corpus would have caught.