| Sovereignty / air-gapped | Images and charts through Harbor, global.imageRegistry, helm_repository_mirror, local vLLM with HF_HUB_OFFLINE=1 |
| Strict multi-tenancy | Tenant from the token (Keycloak mapper), PostgreSQL RLS, OpenFGA, tenant label enforced by Kyverno |
| Zero trust | SPIFFE/SPIRE, mTLS, Cilium default deny, FQDN egress |
| Model governance | OPA: provider, model, region, classification, retention, cost, kill switch |
| Supply chain | SPDX/CycloneDX SBOM, cosign, Kyverno verification |
| Evidential audit | Hash chain, transit signature, WORM object lock bucket, Wazuh |
| FinOps | Cost metrics, burn rules, invoice reconciliation |
| HA / DR | Multi-AZ, CNPG PITR, Velero, documented RPO/RTO |
| Leak free observability | PII filtering in OTel |
| GitOps | Argo CD ApplicationSet per environment, waves infra -> data -> platform -> apps |