A document, not code: map Tirith against the in-cluster Kubernetes admission-policy engines and
their policy kinds (validate, mutate, generate, cleanup, image verification). Expected shape:
admission engines own the in-cluster moment; Tirith's axis is the change (plan, before/after,
blast radius) and multi-document correlation; mutation/generation are explicitly out of scope.
A document, not code: map Tirith against the in-cluster Kubernetes admission-policy engines and
their policy kinds (validate, mutate, generate, cleanup, image verification). Expected shape:
admission engines own the in-cluster moment; Tirith's axis is the change (plan, before/after,
blast radius) and multi-document correlation; mutation/generation are explicitly out of scope.