Decide what AI agents may call, before they call it.

iSwitching high-cost model sessions to a lighter model could save ~$1,850/wk

apiVersion: policies.kyverno.io/v1
kind: ValidatingPolicy
metadata:
  name: block-destructive-ops-production
  namespace: nirmata
  annotations:
    proxy.nirmata.io/enforcement-mode: deny
    proxy.nirmata.io/category: Destructive Ops
    proxy.nirmata.io/description: "Blocks irreversible destructive operations (delete, drop, destroy) in production namespaces."
    proxy.nirmata.io/frameworks: "owasp:LLM08,mitre:AML.T0048,nist:MP-2.3,eu-ai-act:Art.9"
spec:
  evaluation:
    mode: JSON
  matchConditions:
    - name: is-destructive-tool
      expression: >
        object.tool.name in [
          "kubectl_delete", "kubectl delete",
          "helm_uninstall", "helm uninstall",
          "terraform_destroy", "terraform destroy",
          "delete_resource", "drop_table", "truncate_table"
        ]
  validations:
    - expression: >
        object.agent.namespace != "production" &&
        object.agent.namespace != "prod" &&
        !object.agent.namespace.startsWith("prod-")
      # The action wording follows object.policy.enforcementMode, so the
      # message never claims an action the gateway does not take in this mode.
      messageExpression: >
        object.policy.enforcementMode == "deny"
          ? "Destructive operations are blocked in production namespaces."
          : (object.policy.enforcementMode in ["warn-approve", "warn-ask"]
            ? "Destructive operations targeting production namespaces require human approval."
            : "Destructive operation in a production namespace.")
    - expression: >
        !object.tool.arguments.exists(k, k == "namespace") ||
        (!string(object.tool.arguments.namespace).startsWith("prod") &&
         string(object.tool.arguments.namespace) != "production")
      messageExpression: >
        object.policy.enforcementMode in ["warn-approve", "warn-ask"]
          ? "Destructive operations targeting production namespaces require human approval."
          : (object.policy.enforcementMode == "deny"
            ? "Destructive operations targeting production namespaces are blocked."
            : "Destructive operation targeting a production namespace.")