How-to guides

Task-oriented documentation: recipes for a specific job, assuming you already know your way around. Each guide states its preconditions, gives the steps, and shows how to confirm the result.

App teams / app owners

• Onboard a new app — create an App CR and get a governed namespace.
• Declare and change data scopes — grant or revoke an app's data access, and verify enforcement followed.
• Promote an app to production — the platform-raised PR flow, and why promotion can be refused.
• Respond to a cost-cap suspension — diagnose the breach, raise the cap or shrink the app, resume via GitOps.

Platform operators / auditors

• Query an app's evidence — one query, every category: prompts, builds, approvals, deployments, data access.
• Add a policy to the baseline — extend the Kyverno baseline the constitutional way: with a violating manifest that CI must see rejected.