Open Policy Agent (OPA)

A CNCF-graduated project that decouples policy decisions from enforcement across microservices, API gateways, CI/CD and Kubernetes, with policy testing support. Provides runtime guardrails and admission control; does not issue identity or provide observability.