{
  "id": "agent-governance-impl:krate-policy-resources@current",
  "_kind": "AgentGovernanceImpl",
  "_file": "domain/products/krate-controllers.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Krate Policy Resource Governance",
    "agentVersionId": "agent-version:babysitter@current",
    "packageRef": "source-ref:babysitter-sdk",
    "componentKind": "policy-engine",
    "governedSurfaces": [
      "PolicyProfile",
      "PolicyTemplate",
      "PolicyBinding",
      "PolicyExceptionRequest",
      "Kyverno admission reports"
    ],
    "riskControls": [
      "admission-policy",
      "policy-exception-review",
      "agent-tool-governance",
      "workspace-boundary-enforcement"
    ],
    "evidenceProduced": [
      "Krate status conditions",
      "Kyverno policy reports",
      "policy exception requests"
    ],
    "notes": "Models Krate policy CRDs as governance resources connected to Kyverno-backed admission and exception semantics."
  },
  "outgoingEdges": [
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "layer:14-governance",
      "kind": "realizes"
    },
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "agent:babysitter",
      "kind": "composes",
      "attributes": {
        "role": "governance"
      }
    },
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "tool:kyverno",
      "kind": "depends_on"
    },
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "kubernetes-crd-kind:krate-policy-profile",
      "kind": "governs_resource",
      "attributes": {
        "governanceMode": "admission"
      }
    },
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "kubernetes-crd-kind:krate-policy-template",
      "kind": "governs_resource",
      "attributes": {
        "governanceMode": "admission"
      }
    },
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "kubernetes-crd-kind:krate-policy-binding",
      "kind": "governs_resource",
      "attributes": {
        "governanceMode": "admission"
      }
    },
    {
      "from": "agent-governance-impl:krate-policy-resources@current",
      "to": "kubernetes-crd-kind:krate-policy-exception-request",
      "kind": "governs_resource",
      "attributes": {
        "governanceMode": "admission"
      }
    }
  ],
  "incomingEdges": []
}