Kyverno allowLatestTag Pitfalls: How Policy Can Stop Pods From Restarting
A disallow-latest-tag policy only blocks new admissions. That gap turns a routine pod eviction into a permanent outage. Here's the failure mode and the fix.
#reliability
2 posts
When Agents Should Stop: Designing Safety Boundaries That Work
Stop conditions are a feature, not a failure state. Budget caps, progress checks, and exit contracts that make autonomous agents quit cleanly.