policy-as-code

Write and ship authorization policy as code — OPA/Rego-class rules, tests, decision logs, safe rollout.