Decision Record
Withdrawn: enforce cluster posture at admission over trusting reviewed manifests
I withdrew this record on September 20, 2026. It governed the Kubernetes Demo, a separate single-node k3s learning environment that was never part of ETA production, and I tore that environment down the same day. This set records decisions about systems that are live and used, so the record no longer belongs in it. Its number is not reused.
The policies it described are still public: five OPA Gatekeeper constraints and one ValidatingAdmissionPolicy, in k3s-demo/policy.
Formerly one of a set of architecture decision records. The canonical set lives in the
infrastructure-patterns repo.