Guide

• Commands — what policies, flows, verdict, ui, and version each do.
• How verdict works — the engine mechanics, known v1 simplifications, and two real regressions it caught.
• Build — building with mise or plain Go.
• Run — RBAC, kubeconfig, and running each subcommand against a real cluster.
• Lab — a self-paced, copy-paste lab that reproduces a real catch end-to-end on your own machine, no cluster of your own required.